Newsflash · PHP security ·

Does your website use PHP? Check its version now.

CERT-FR reports two critical vulnerabilities that allow an attacker to execute code remotely. Patches have been available since October 21. If your installation is affected, updating it is urgent.

Read the CERT-FR alert and check the affected versions

What’s the problem?

An explainer video is coming to YouTube.

Remote code execution allows an attacker to run their instructions on a server. To find out whether your project is affected, you need to check its PHP version and environment. The CERT-FR bulletin lists the affected versions and patches.

An alert shared across four countries

National agencies have published their guidance. In the Netherlands, the NCSC even reports temporarily taking its own website offline as a precaution.

Summaries of official publications dated October 21, 2026, consulted on October 22. Each card links to the original source.

France · CERT-FR / ANSSI

cert.cyber.gouv.fr ·

Alert and recommendations

Isolate affected systems and apply patches

CERT-FR recommends isolating affected systems, then migrating to a supported version with the latest patches. Its bulletin confirms that patches are available.

Read the CERT-FR bulletin (French)

Japan · IPA

ipa.go.jp ·

Early warning and preparation

Identify where PHP is used to prepare for the update

Published before the patches were released, the IPA’s early warning asks organisations to identify their use of PHP and prepare to apply updates promptly when available.

Read the IPA’s early warning (Japanese)

United Kingdom · NCSC

ncsc.gov.uk ·

Patching guidance

Prioritise updates to internet-facing systems

The NCSC asks organisations to identify PHP systems and install a patched version. It recommends considering taking systems offline if neither updates nor temporary mitigations can be applied quickly enough.

Read the NCSC alert (English)

Netherlands · NCSC

ncsc.nl ·

Reported precautionary measure

The NCSC temporarily took its own website offline

The agency reports this precaution and calls for patches to be applied. It also provides a decision tree and an inventory of software that uses PHP.

Read the NCSC publication (Dutch)

A diagnosis to understand what to do next

After checking that your project is a good fit and that the necessary access is available, I offer an analysis within an agreed scope, a walkthrough of the findings and a prioritised action plan. An update can then be agreed as a separate service, after checking feasibility and compatibility.

Book a free 20-minute call

Describe your project and blocker when booking. This first call helps us define your needs; the diagnosis is a separate service.

Jean Z. Sordes

Technical intervention · diagnosis & ongoing support

Your project deserves
an experienced developer.

I’m Jean Z. Sordes. I was developing software before ChatGPT, and had already finished my studies when it launched. I help you understand what’s blocking you and choose the right actions for your project.

Need an experienced developer? Let’s talk about your project. I guide your technical choices; you make the final decisions.

Book a free 20-minute call

Your project, your blocker, your own words. Let’s keep it simple.

Jean Z. Sordes

Hi, I’m Jean!Engineer · educator · entrepreneur

Projects that move forward. Teams that become more independent.

Urgent intervention · Let’s roll up our sleeves

Vibe Pompier

Is your project on fire?
You’re no longer on your own.

Is your app stuck, a feature unresponsive, or the bug list growing? Tell me what’s happening, and we’ll roll up our sleeves together.

I help you understand what’s going wrong, work on the project and check the expected result with you. We put out the fire so you can move forward again.

Let’s plan an intervention

A free 20-minute call on Notion Calendar.
We agree on the paid intervention together afterwards.

What does rolling up our sleeves look like?

  1. Let’s prepare the intervention

    Book the free call and prepare the context: your project, the blocker, what you’ve tried and what you want to be able to do.

  2. We make a plan

    I review the project and the access needed. We agree on the outcome, price and schedule before starting.

  3. We put out the fire

    I lead the investigation and make the technical fixes. You bring the context and feedback, with no need to code.

  4. We check together

    We validate the affected user journey. I explain the changes and give you the information you need to continue.

Understand, prioritise, progress

Vibe Doctor

Diagnosis and ongoing support.
Understand what needs improving and prepare the next steps.

I take the time to understand your business, project and needs. Together, we identify useful improvements, choose priorities and plan the next steps. I then support their implementation with advice, coaching and follow-up.

  • A diagnosis to understand your needs and opportunities.
  • Clear priorities and a plan for what comes next.
  • Advice, coaching and ongoing support to help your team progress.
  • Useful applications of AI: reduce repetitive work, improve your service and make better use of your information.

You make the final decisions. We define the pace and scope together; any hands-on implementation is scoped separately.

Let’s plan a diagnosis

Free 20-minute call on Notion Calendar.

Talks and training

Understand AI.
Learn to build.

Organising an event or looking to train your team? I offer talks on practical uses of AI and web development training. We define the objectives and content around your audience.

Let’s discuss your needs

Teaching experience from the field

From creating courses to a professional qualification.

At MolenGeek Roubaix, I created the content for a web development training programme. I taught and supported learners throughout, up to earning their French professional qualification at bac+2 level (two years of higher education).

  • Build a learning progression with suitable lessons and exercises.
  • Guide web projects from interfaces to databases and deployment.
  • Track learning progress and prepare learners to present their project to an examination panel.
MolenGeek’s web and mobile web developer programme

How I work

Technical expertise.
And above all, common sense.

The right choice helps your business move forward. It doesn’t always require the most code.

Understand first

Your needs, users and context come before the technical solution.

Explain the choices

What works, the trade-offs and uncertainties: you have the information to decide.

Keep it proportionate

An existing solution may be the best option, even if it means you don’t need my services.

Prepare for what’s next

You or your team become more independent. The project becomes easier to pick up and hand over.

Watch on YouTube ↗

About

Hi, I’m Jean.

Jean Z. Sordes

Software engineer, educator and entrepreneur.

I like connecting technical choices to what matters for your business: users, costs and the ability to move your project forward.

My role: take the time to understand, make things clear and help you continue without depending on me for every decision.

Explore my background Find my background on LinkedIn

My background

Build, teach, create.

The experience behind my services.

  1. MolenGeek

    1. Campus Manager

      – present

    2. Training Project Manager

      – present

      Designed the curriculum and trained learners through to their web and mobile web developer qualification (French bac+2 level). Integrated AI into the programme’s tools and methods.

  2. Entrep Ensemble Lille

    Founder

    – present

    Created a professional network: networking coffees, workshops and visual identity.

  3. Associate Agency

    1. Software Engineer

      – present

    2. Software Engineer

      –

      Requirements definition, design and initial development of customer relationship management (CRM) and enterprise resource planning (ERP) tools.

    3. Product Designer · freelance

      Designed the interface and a functional social network prototype. Supervised an intern developer during implementation.

  4. Holberton School France

    Technical Instructor

    Supported learners in the fundamentals of software development.

  5. Capgemini

    Java Development · SNCF Fret assignment

    –

    Worked on business rules and the generation of technical documentation in PDF format.

  6. CGX AERO

    Angular and C# Developer

    –

    Designed and developed Angular components and their C#/C++ APIs. Wrote a guide to web application security.

  7. StandOut

    WordPress Developer · freelance

    –

    Adapted a website for mobile, created a homepage and developed a plugin so the client could customise colours, images and text themselves.

  8. Le Catalyseur

    Civic service

    –

    Welcomed visitors and ran activities in the coworking space. Facilitated brainstorming sessions to help incubated project founders develop their ideas.

Education

Master’s degree in MIAGE

Toulouse III University · –

Computer science and business management.

View my full LinkedIn profile
MolenGeek logo credit

Molengeek, via Wikimedia Commons · CC BY-SA 4.0, unmodified.

Sound familiar?

You keep prompting AI, but your project is still stuck?

Pages load endlessly. One fix breaks another feature. You no longer know what to ask AI to move forward.

We review what’s blocking you and what you want to achieve. I help you choose the right next step for your project.

Let’s talk about your blocker
A situation I helped with

I supported someone whose Lovable-built application had endless loading screens, redirects and failing features. I took over the project, worked on its structure and introduced methods to keep it moving. I then supported a developer through the handover.

This personal account is anonymised. I have no testimonial or verifiable numerical results for this assignment.

From code to practical tools

Practical tools.

Three tools for Obsidian, a note-taking application. Discover the projects and what they can do.

Explore all my projects

Scroll through the projects horizontally or choose a name. With the keyboard, use the arrow keys when the gallery has focus.

Illustrative example
btwBy the way

One shortcut. The full text.

Obsidian plugin · Automation

Auto Expander

Replace short shortcuts with reusable text as you type, on desktop or mobile.

My contribution, links and details

My work: development of text expansion, configurable triggers and Obsidian command execution.

Concept diagram
To doIn progressDone

Connected notes. Shared tracking.

Obsidian plugin · Work tracking

Workflow Boards

Track tasks across multiple boards, recurring actions and business opportunities, keeping your notes as the source of information.

My contribution, links and details

My work: development of the tracking engine, dashboards and workflow configuration.

First version released · Interfaces in French

Statistics recorded on from GitHub and Obsidian’s public statistics. Downloads include updates and do not represent a count of active users.

View my other projects on GitHub

A few answers before we start

You might be
wondering…

Do I need to know how to code?

No. Explain the context, what should work and what you’ve tried in your own words. I lead the technical work; you contribute information, feedback and validation of the result.

What do we prepare during the free call?

These 20 minutes help us understand your situation and prepare for Vibe Pompier or Vibe Doctor’s diagnosis and ongoing support. We review the project and the access needed, then agree on a proposal before any commitment. Booking this call does not order a paid service.

Are fixes included in Vibe Pompier?

Yes, Vibe Pompier includes fixes for the agreed blocker. Together, we define the expected result and how to check it. If your request needs deeper analysis or a broader redesign, I explain this and propose an appropriate scope before you commit.

Can you work with my tool or technology?

We review your project, its complexity and the access needed before committing. This lets us agree on an intervention suited to your environment and my scope of work.

What is delivered?

The agreed fix, an explanation of the changes and the information you need to continue. We check the affected user journey together. Production deployment or a ready-to-deploy handover is specified in the proposal.

What price and timeline should I expect?

We agree on the deliverable, price, start date and schedule before beginning. You can decide based on a clear proposal, suited to the blocker and the value of resolving it.

When should I choose Vibe Doctor?

Vibe Pompier addresses a specific blocker in an existing project. Vibe Doctor helps you understand needs and possibilities, choose priorities, plan and track implementation over time, with advice and coaching. Useful applications of AI are among the opportunities to explore. You make the final decisions; technical interventions are scoped before commitment.

The first step is a conversation.

A blocker to resolve?
A direction to define?

20 free minutes to prepare for Vibe Pompier or take the first step with Vibe Doctor, based on your situation and goals.

Before our call, prepare a few sentences about your project or blocker.
Do not share confidential information.

Book a free 20-minute call

Choose your time slot in Notion Calendar. Booking and confirmation are handled by that service.

No suitable time slot or having trouble booking? Find me on LinkedIn.

A first call with no obligation. The scope and price of the assignment are agreed before we start.