Government websites shut over PHP flaw gradually reopening, some risks remain

Government and banking sector websites that were shut down due to security risks have gradually started coming back online. The websites were closed from last Thursday after a serious security vulnerability was found in PHP, the technology used to build them.

According to the Software Development and Operation Center under the Office of the Prime Minister and Council of Ministers, more than 1,000 domains have been restored after security patches, testing, and verification were completed. Websites and online services of the Ministry of Finance, the Ministry of Communication and Information Technology, and the Office of the Prime Minister are already running.

Subhash Dhakal, officiating chief of the Office of Information Technology and e-Governance, said work is still underway on the systems of the Public Service Commission, the Department of Passports, and the Department of Transport Management. The center said staff are working to fully restore the remaining services soon.

The Agriculture Development Bank said its systems were unaffected since they already run on an upgraded version of PHP, and that all its banking services have resumed after security checks. However, the bank's online account-opening facility will open later, as it is being upgraded to a new version.