dropthehassle

WordPress site offline? Rebuild it with your AI and go live on your own domain

Short answer: if your host can install the PHP update, do that first. If you only need your pages back, export your content, ask your AI to rebuild it as an HTML/JS site, publish it with one command, then go live on your own domain.

Last updated: 22 October 2026.

What happened

On 21 October 2026 PHP released fixes for two critical vulnerabilities, known as PHP2Shell (PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35). The BBC reports that security agencies, including the UK's NCSC, advised organisations that cannot apply the fix in time to consider taking their sites offline. Finland temporarily shut down public government web services and the Dutch cyber-security agency took its own website offline. WordPress runs on PHP, so many WordPress sites are affected.

PHP 8.1 and older no longer get updates from the PHP project (its security team did publish minimal source backports for 7.4, 8.0 and 8.1 for people who build from source): upgrade, or ask your host or vendor for a backported fix.

Rebuild and go live in four steps

  1. Export your content. In WordPress go to Tools, Export, All content, and download the XML file. Save your images from the Media Library. If you cannot log in, copy the text of each page from the live site or a backup.
  2. Ask your AI to rebuild it. In Claude Code, Cursor or Lovable, give it the export and say: Rebuild this WordPress site as an HTML/JS site with the same pages, text and images. Put the result in one folder with index.html. For Lovable, build once and use the dist folder.
  3. Publish it. In the folder, run npx -y dropthehassle@latest deploy .. No account and no token for the first deploy: you get a free HTTPS link and a claim link. Or drop the folder on the homepage.
  4. Go live on your own domain. Claim the site, then pick a name: a .com is €19 / $19 a year, including VAT in the EU, the same every year, with no DNS step. Add a mailbox such as info@yourdomain.com: €5 / $5 a month, including VAT in the EU, for the first inbox. A domain you already own needs one A record (how).

Honest limits

Quick answers

What happened to PHP on 21 October 2026?

PHP released fixes for two critical vulnerabilities (PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35). Security agencies, including the UK NCSC, advised organisations that could not patch in time to consider taking systems offline. WordPress runs on PHP.

Should I just update PHP instead?

If your host can apply the PHP update, that is the quickest fix and your WordPress site can stay as it is. A rebuild makes sense if you only need pages and want fewer moving parts to maintain.

Does DropTheHassle run PHP or WordPress?

No. DropTheHassle does not run server code (PHP, Node, Python). It serves built files: HTML, CSS, JavaScript and images. WordPress plugins, logins and PHP forms need another approach.

Can I keep part of my site on a server?

Yes. Keep the server part where it runs and link it with set_backend (or the Backend card) using its HTTPS address. DropTheHassle serves your domain and passes requests, by default /api/*, to that host. The site must be claimed first.

What does a domain and mailbox cost?

A .com is €19 / $19 a year, including VAT in the EU, the same every year. A mailbox is €5 / $5 a month, including VAT in the EU, for the first inbox and €3 / $3 a month per extra inbox.

Sources

Where to go next

Publish your site