Small fix, big conversations

It’s not very often that internet code makes the news. As society increasingly, usually unquestioningly, relies on the web to ‘just work’, when things fall over and it affects our daily lives, it’s hardly surprising that people become anxious. Just two weeks ago there was an alarming announcement that PHP, a piece of software that runs websites the world over, had a security vulnerability. We take these things incredibly seriously, so in real time we had to figure out: was this going to be a disaster, bringing down everything we’d ever done?

The reality was that while the problem was significant, it quickly became clear that it could be dealt with at the very top of the internet tree, by the servers that manage sites, rather than on a site by site basis. In the meantime, a lot of very worrying headlines had started to seep through to our clients, which in turn were then picked up by IT companies. After considering it carefully, we decided the best answer was a swift, friendly and factual reply to each client who got in touch, once we had checked with their hosting provider that their site was safe.

A reason to talk

The surprise for me was what happened next. These concerned interactions about a seemingly obscure piece of code evolved into more human conversations about business. I think website security is something that doesn’t get nearly the attention it deserves. After all, so much of our working lives is spent dealing with intangibles, whether that be a simple email or text, never mind the large scale websites we design for businesses in tech, finance or law. Given that, I think it’s incredibly positive that we started to talk about whether there was more we could do, or if more significant website security updates should be addressed in sites that have been online for sometimes many years.

What astonished me was that for some of our clients these exchanges became a call to action. One firm has grown and needed a new way of handling the different levels of staff on their team; another was concerned that they didn’t want to have direct emails on their website any longer; another is opening a new office in the Middle East shortly; for yet another there was an early-stage 2027 incubator project they’d been meaning to mention. So I did what I always do: started chatting and ran through the options on a few calls.

But still. All this from a code vulnerability? Really?

Pull up a chair

Communication, personal service and showing you care count for a lot. This struck me anew as I was at a restaurant at the weekend, where a warm welcome on a chilly Sunday morning before they’d officially opened led to a lovely meal. We were more than happy to wait for the place to open, but doing so, tucked inside with a drink looking over a menu, was much more fun than standing in a line outside.

That experience reminded me of the importance of a friendly, outward-looking attitude; that good ideas come from being open to easy discussions about subjects both small and significant. I think Managing Partners of law firms will recognise that some of their best advice to clients starts with a conversation about something else. For my part, when clients and designers start talking and brainstorming about a small problem, that’s where the best work begins.

It’s for this precise reason that I am heading back to the Middle East next week, meeting with longstanding clients to catch up, as well as discussing live projects we’re well advanced with delivery. In theory, progressing the project could all be done with a call. Experience suggests, especially in that region, being there face to face not only improves efficiency, it helps to build really decent relationships.

The whole PHP drama is a reminder that sometimes the best reason to get in touch is a small one.

In case you’ve still got questions about website security updates

Do I need to do anything about the October 2026 PHP vulnerability?
In most cases, the PHP patch is applied at server level by your hosting provider. Check directly with them if you hold the account, or get in touch with your web team who can check and confirm your site is safe.

How often should a website have security updates?
We’d always suggest updating software or plugins regularly, particularly for sites that have been online for several years. We recommend applying security patches as soon as they’re released and reviewing everything at least once a month. If you aren’t sure where you stand, a quick review with your agency is a good place to start.

Does your business need a new website?

At Richard Chapman Studio, our work runs the gamut from elegant, easy to use brochure sites to precisely-scoped work that follows industry specific regulatory requirements.

If you’re interested in working with us, get in touch either by calling +44 20 7351 4083 or emailing us direct.