GoKawiilColdFusion Hosts Find Leftover PHP Installs and Unneeded Mitigation Rules
A ColdFusion developer discovered that a hosting provider's server-wide IIS rewrite rule, deployed after PHP's October 21, 2026 emergency patches for a critical flaw dubbed PHP2Shell, was blocking legitimate multipart form-data requests on sites that don't even run PHP. The piece walks through using PowerShell to detect whether PHP is installed on a Windows/IIS ColdFusion or Lucee server—often left over from control panels or old phpMyAdmin installs—and how to remove it if unused.