Breaking The Zelda 40th Anniversary Switch 2 Launches Today — but Walmart Is Canceling Pre-Orders the Day Before Delivery, and Nintendo Admits It Underestimated Demand
Gaming News

A PHP Vulnerability Locked Final Fantasy 14 for Nearly 24 Hours — Square Enix Hands Out a Free Day, and the Community Kept Everyone’s Plants Alive

A PHP Vulnerability Locked Final Fantasy 14 for Nearly 24 Hours — Square Enix Hands Out a Free Day, and the Community Kept Everyone's Plants Alive — cover image from Polygon (FF14 image from the actual story) source (https://static0.polygonimages.com/wordpress/wp-content/uploads/chorus/uploads/ch)

A bug in one of the web’s oldest programming languages just took down a chunk of the gaming internet. The discovery earlier this week of two serious security weaknesses in PHP — the language that powers a massive number of websites and applications — sent online services offline around the globe until fixes could be distributed and applied. Even the Steam store went down amid the issues. And inevitably, games were caught up in the fallout, with Final Fantasy 14 and Umamusume: Pretty Derby among the titles hit by outages and login problems.

Square Enix Locked the Doors — Then Paid Players Back

Final Fantasy 14’s operators closed the MMO to new logins as the vulnerability made the rounds, leaving subscribers locked out of Eorzea. After roughly 24 hours of frantic work on the PHP issue, Square Enix started allowing new logins again — as Polygon notes, the security situation “only lasted about one day.” Square Enix is well aware that subscribed players lost paid game time during the shutdown, and GamesRadar reports the company is granting everyone one free day of game time to make up for it.

There’s a housing-related aftereffect, too: Square Enix briefly paused housing auto-demolition — the system that reclaims inactive housing plots — while players couldn’t log in. With the PHP issues solved, auto-demolition resumes on October 26.

Enter the PHP Watering Service

The lockdown posed an unexpected problem: plants. Final Fantasy 14 runs a number of its systems on real-world timers that continue whether or not a player is logged in, and players’ in-game gardens kept growing while they were stuck outside. Those unlucky enough to be locked out were left fearing their carefully tended crops would wither and die.

The community’s answer was everything the Warriors of Light are known for. One player made a post on Reddit — spotted by PC Gamer — that simply offered a “PHP Watering Service”: reply or DM with the location of your in-game home, and they’d water your plants for free. Others had the same idea, with more watering service posts popping up on X. It’s mechanically possible because FF14 lets any player water any plant in the game, even those inside other players’ homes, so a communal aid network formed across the internet within hours. As Polygon puts it, since the lockdown lasted about a day, “nobody’s plants should have died” — and there’s a reason Final Fantasy 14’s community has the reputation it does.

It’s been a rough stretch for game security in general this week — Capcom also confirmed a breach exposing 11.7 million CAPCOM ID records, a separate incident in which every email address was leaked.

Sources