Skip to main content

Posts

PHP2Shell Vulnerability (CVE-2026-109618 & CVE-2026-109619): 7 Simple, Safe Fixes for Sri Lanka Websites

Also on bkdevops.lk: https://bkdevops.lk/php2shell-vulnerability-fix-sri-lanka-smes/ The PHP2Shell vulnerability is an urgent warning for every business running a WordPress website, online store or custom PHP portal. In late October 2026, the PHP team disclosed two critical remote code execution flaws ( CVE-2026-109618 and CVE-2026-109619 , both rated CVSS 9.2) that allow unauthenticated attackers to run commands on unpatched servers before application code even runs. For a business in Colombo, Kandy, Kurunegala or anywhere in Sri Lanka, a server compromise can expose customer records, deface pages or turn a website into a spam relay. This guide explains how the PHP2Shell vulnerability works, how attackers use it to drop hidden web shells, the signs of compromise to check today, and seven simple, safe steps to patch and harden your server. What is the PHP2Shell vulnerability (CVE-2026-109618 and CVE-2026-109619)? On 21 October 2026, the PHP project released emergency updat...
Post a Comment
Read more
Recent posts

AI Scams and Deepfake Phishing: How Sri Lanka SMEs Can Protect Their Business

Also on bkdevops.lk: https://bkdevops.lk/ai-scams-deepfake-phishing-sri-lanka-smes/ AI scams are no longer something that only happens to big companies overseas. Today, a criminal can copy a voice from a short video, write a perfect email in seconds, and even fake a live video call. For a small business in Kurunegala, Kandy or Colombo, where most payments are approved over WhatsApp or a quick phone call, that is a real risk. The good news: you do not need expensive tools to stay safe. Most AI scams still depend on one thing: getting someone to act quickly without checking. This guide explains how these scams work, the warning signs, and simple habits that protect your money, your accounts and your customers. It is general guidance, not legal advice. What are AI scams and deepfake phishing? Phishing is when a criminal pretends to be someone you trust (your bank, a supplier, your boss) to get money, passwords or one-time codes (OTPs). Deepfakes are fake audio, video or images...
Post a Comment
Read more

Should Your Website Have an AI Chatbot? A Practical Guide for Sri Lanka SMEs

Also on bkdevops.lk: https://bkdevops.lk/ai-chatbot-website-sri-lanka-smes/ Many Sri Lankan customers now expect a quick answer, often late at night or on a holiday. AI chatbots promise exactly that: a helper on your website that replies instantly, any time. For a small team in Kurunegala or Colombo that already juggles calls and WhatsApp messages, it is a tempting idea. But a chatbot that gives wrong prices, ignores Sinhala questions, or traps customers in a loop can do more harm than good. This guide helps you decide whether your website really needs an AI chatbot, which kind fits your business, and how to set one up safely. It follows our practical AI guide for Sri Lanka small businesses and our guide to using AI for SEO and website content . It is not a review of specific chatbot products. What an AI chatbot actually is A website chatbot is a small chat window, usually in the corner of the page, that answers visitor questions. There are three common types: Simple rule...
Post a Comment
Read more

Using AI for SEO and Website Content: A Safe Guide for Sri Lanka SMEs

Also on bkdevops.lk: https://bkdevops.lk/ai-seo-website-content-sri-lanka-smes/ AI tools like ChatGPT, Gemini, and Claude can write a full service page in seconds. For a busy owner in Kurunegala or Colombo, that sounds like the answer to "we never have time to update the website." But a page that reads like everyone else's page will not win customers, and publishing unchecked AI text can quietly hurt trust and search visibility. This guide shows how to use AI safely for SEO and website content: what it does well, where it goes wrong, and the checks to run before anything goes live. It builds on our practical AI guide for Sri Lanka small businesses (everyday AI tasks) and our on-page SEO checklist (titles, headings, images, and links). It is not a review of AI tools or plugins. Why AI content needs a plan, not just a prompt Search engines and customers want the same thing: a page that answers the question clearly and honestly. Google's public guidance focu...
Post a Comment
Read more

How to Get Real Work Done with AI: A Practical Guide for Sri Lanka Small Businesses

Also on bkdevops.lk: https://bkdevops.lk/ai-practical-guide-sri-lanka-small-businesses/ AI tools like ChatGPT, Gemini, and Claude are now easy to try on a phone or laptop. Many Sri Lankan business owners have opened one, typed a question, got a long generic answer, and closed the tab. That is a normal first experience—but it is not the end of the story. Used well, AI is like a fast, tireless assistant that drafts, summarises, and suggests. It still needs you to give clear instructions, check its work, and make the final call. This guide shows practical, everyday ways a small business—a bakery in Kurunegala, a home cleaning service, a small online shop, or a tuition class—can get genuinely useful work done with AI, plus prompts you can copy and the cautions that keep you safe. First, how to ask AI properly Most weak AI answers come from weak instructions. A good prompt usually includes four things: Who you are: "I run a small bakery in Kurunegala." What you want...
Post a Comment
Read more

Practical On-Page SEO Checklist for Sri Lanka SMEs

Also on bkdevops.lk: https://bkdevops.lk/on-page-seo-checklist-sri-lanka-smes/ Your website can look polished and still be hard to find. A clinic in Kurunegala, a hotel near Colombo, a tuition centre, or a hardware shop that lives on WhatsApp enquiries often loses traffic for simple on-page reasons: vague titles, thin service pages, missing alt text, or no clear internal links. That is on-page SEO —what search engines and people see on *your* pages—not Google Maps setup and not page-speed tuning alone. This guide is a practical on-page SEO checklist for Sri Lanka SMEs. It pairs with our Local SEO basics for service businesses (Maps and local presence) and our WordPress speed checklist (load time). Here we stay on titles, headings, content, images, internal links, and Rank Math basics. Why on-page SEO matters for local leads Most buyers search on their phone: “dental clinic Kurunegala,” “hotel near Negombo,” “O/L tuition Colombo,” “website design Sri Lanka.” If your page ti...
Post a Comment
Read more

Website Launch Checklist for Sri Lanka SMEs

Also on bkdevops.lk: https://bkdevops.lk/website-launch-checklist-sri-lanka-smes/ A new website is exciting—until the first real customer finds a broken contact form, a “Lorem ipsum” paragraph, or a browser warning that says “Not secure.” For Sri Lanka SMEs—shops, clinics, hotels, tuition centres, and service firms in Kurunegala and beyond—launch day is when the site starts working for you, or quietly against you. This guide is a practical pre-launch checklist : what to confirm before you switch the new site on, and what to watch in the first week after. It pairs with our domain and business email setup checklist (getting the address right), choosing web hosting for Sri Lanka SMEs (where the site lives), and the WordPress maintenance checklist (what happens after launch). It is not a design brief or a full SEO audit. Why a launch checklist matters for small businesses Most SMEs launch a site once every few years. That means nobody on the team remembers every ...
Post a Comment
Read more