PHP2shell: one patch for every site
Late October 2026 a critical vulnerability in PHP itself became known under the name PHP2shell – independent of whichever CMS is in use. Anyone running individual WordPress or website-builder instances has to update each installation separately. As a cloud website service / WaaS provider we had a clear advantage: one engine, one release – and every R24 site was current the moment the patch shipped.
Kirby 6 Beta: prepared centrally
Kirby has published version 6 as a beta. We are currently preparing every R24 site for the upcoming update, so the switch can happen centrally and unnoticed. For members that mainly means:
- Live editor: edit content and see the page at the same time – including in a second window or at different viewport sizes.
- Passkeys and your own two-factor login.
- A noticeably faster Panel, especially on complex sites.
New feature: custom collections
Every R24 site can now create, copy and keep collections as it likes for the rest of its life. References, locations, team, products or custom content types: the structure grows with the site, without us having to rebuild it.
Further updates
- GTM. Google Tag Manager can now optionally be turned on in the Manager. Cookies and consent run automatically. Be warned: this opens a connection to Google’s servers that stays in place – unless the tracking settings are deleted.
- New grid layouts. Lists, logos, team and news can be output more flexibly as a grid.
- English as default language. New sites can set English as the source language.
- New Kirbytag
(highlight: …). Text is shown as a chip – for labels, status or short marks in running copy. - Mandatory updates in the R24 wiki.
