Finally the web-services I needed are back, but boy was this annoying. I lost some time since things got pushed back - all because PHP was not written with security in mind. Yes, features matter too, ease of use, functionality but .... I don't know. I think you need to also put security on the same level of scrutiny; taking control over servers is a huge glaring issue. That simply should not be possible.