Onlime

Web hosting: limeBASIC, limePRO and limeDEDICATED

Response status

Earlier patch report; additional configuration change scheduled

Response information checked

2026-10-27

Current re-audit: Source inaccessible; on hold · Research date: 2026-10-28

Earlier reports announced PHP updates and reopening on October 21. A separate preventive change is scheduled for October 28, 08:00–10:00: enable strict mode and HttpOnly and set SameSite=Lax for PHP 8.2–8.5 sessions.

Scope: Applies to PHP 8.2–8.5 on limeBASIC, limePRO and limeDEDICATED. The configuration notice is Open at retrieval and is not a completion announcement.

Some official sources could not be retrieved. Reverification remains on hold and the previous verification date is retained.

What users should do

For custom PHP sessions, check payment POST returns, SSO and external iframes. Adjust SameSite in Airpane as needed and ask support about other settings.

Official service URL

• https://onlime.ch/

Source URLs

1. Onlime: PHP vulnerability responsehttps://www.onlime.ch/blog/php2shell-kritische-php-sicherheitsupdatesResponse evidence
2. https://www.onlime.ch/index.php/statusmessages/secure-php-session-defaultshttps://www.onlime.ch/index.php/statusmessages/secure-php-session-defaultsResponse evidence
3. https://www.onlime.ch/statusmessages/critical-php-security-releasehttps://www.onlime.ch/statusmessages/critical-php-security-releaseResponse evidence