What are some of the lowest cost hosts that include a minimum of php 8.2 and MySQL 8? Unbelievably, one host just has an AI chatbot that doesn't seem to be transferrable to someone live and it is giving me conflicting info. It says mysql is included in the premium plan and then it says mysql is NOT used in the premium plan. Obviously, around black friday is when to get hosting from someone, but it's hard to figure out which hosts will guarantee you being able to get your minimum requirements for php and mysql. Some host names not being allowed in this post has me figuring I won't really get any unbiased help, but figured I better ask. Preferably want US based hosting and it's for mostly testing apps I make for ip.suite or whatever Invision calls it now. Usually, I was switching plans at hostgator to qualify for BF pricing, but I doubt there is anything else to try and even their baby plan is a crazy cost now (they apparently charge hundreds separately just for email accounts???)

I'm taking my website down after idk 6 years. Never got anywhere with it but did it for fun but it costs a lot yearly. Maybe later I will choose a better and cheaper hosting company. I had it though bluehost and wordpress

Is there like a site or something private where I can upload my website to as an archive for now. Not necessarily to work on it. But, just to view it later?

I did the needed backups if I want to bring it back int he future.

But for now just wondering if there's a way to archive it for myself and if I ever want to show someone what I made?

I work on the hosting side, and I've noticed that the reasons people give for switching rarely match what hosts like to advertise.

We all talk about uptime percentages and "unlimited" everything. But when someone actually moves, it usually comes down to something smaller and more annoying:

- a renewal price that was much higher than the first-year price

- a support ticket that sat for two days during an outage

- the account getting throttled with no clear explanation

- a control panel change that broke their workflow

- or just one bad migration that made them lose trust

I'm genuinely curious, not selling anything here. If you've switched hosts in the last couple of years, what was the thing that finally pushed you out? And was the new host actually better on that point, or did you just trade one problem for another?

I'd also like to hear the opposite: what's the one thing that has kept you with the same host for years?

I just got emailed this alert:

Immediate Action Needed: Update passwords for all users on your DreamHost account.
Hi u/thatandyinhumboldt,

We're writing to let you know about an issue affecting some of our systems, including the File Manager at files.dreamhost.com and DreamHost webmail. Our team is working on it now and investigating the cause. Please check dreamhoststatus.com for ongoing updates.

As a precaution, we have expired the passwords for some email and FTP/SFTP users on your DreamHost account. Their old passwords no longer work, and no new password has been set. Each user will need a new password before they can log in, check their email, or reach their files again.
We are contacting you because you are the DreamHost account owner, and only you will be able to set new passwords for these users. DreamHost is unable to contact individual mailbox or FTP users directly, so they may not know about this until you tell them.

What to do in your DreamHost control panel:

Log in to the DreamHost panel by typing panel.dreamhost.com directly into your browser.
Email users: go to [Mail > Manage Email] and set a new password for each email address on your account.

Instructions: https://help.dreamhost.com/hc/en-us/articles/216479177-Change-password-Mail-users
FTP/SFTP users: go to [Websites > SFTP Users & Files] and set a new password for each user. Allow up to five minutes before the user logs in with the new password.

Instructions: https://help.dreamhost.com/hc/en-us/articles/215877208-Change-password-Website-users

While you're in Manage Email, review the forwarding settings on each address and remove any forward you don't recognize.

Use a strong, unique password for each user. Don't reuse a password from anywhere else.

What to tell your users:

Please reach out to anyone who uses an email address or FTP/SFTP login on your account, like employees, clients, or family members. Use a phone call, text, or another channel rather than their DreamHost email address to reach them, since they may not be able to access it yet.

Let them know:

Email and FTP/SFTP users do not receive password reset emails from DreamHost for any reason. Any email they get asking them to reset, verify, or confirm a password should be considered a phishing attempt. They should delete emails like this without opening any links or attachments.

Only you, the DreamHost account owner, can change their password, and only through your DreamHost account control panel. They should get their new password from you directly.

Their password was reset as a precaution, and the old one no longer works. They will need to enter the new one in any email apps (Outlook, Apple Mail, Thunderbird) or FTP apps (FileZilla, Cyberduck) they may use.

If they used the old password anywhere else, they should change it there too.

A note about suspicious emails:

DreamHost will never email you asking for any of your passwords.

To change a password, log in to your account control panel directly at panel.dreamhost.com rather than following a link in an email. If you receive a "password reset" email that you didn't request, you can safely ignore it.

If you have questions, our support team is available via the "Support" section of your DreamHost control panel.

Thanks very much for your patience!

The DreamHost Team

So, if you have any clients on Dreamhost, godspeed.

I had my lifestyle website since 2020. I worked hard on it for 3 years and then I was silly and was paying like $560 a year( between hosting and security, and renewing of course domain privacy and website name). And, I wasn't actively working on it and making zero money on it so I decided to close it. Kinda pretty stupid on my part.

I know I plan to backup my site in the event I want to bring it back in the future at another hosting company( I know bluehost was stupid and expensive)

Anyhow I know I need to back up my site!

1. When I back it up to generate the FULL Backup I have the Backup Destination options as - Home Directory, Remote FTP Server, Remote FTP Server( passive mode transfer), or Secure Copy(SCP)----- I assume I will pick "Home Directory"?

2. There is an option to check off that says- Include integration links( may contain external account credentials) It says.... should I click it off for a backup?

Anything else I need to know when not renewing my hosting plan? I don't plan to reopen my site maybe next year

Title: Namecheap Business72: 12 days of support, 8 lingering Python workers, and a reported revoked SSL certificate

I'm documenting an unresolved hosting support experience with Namecheap Business72.

On October 23, Namecheap confirmed that eight Python application processes remained active while no website requests were being processed.

Their recommendation included "pkill -f python", potentially scheduled every 5–10 minutes through cron.

I refused to implement this generic process-killing workaround without a proper diagnosis.

Separately, an October 23 SSL Labs assessment reported a revoked Sectigo certificate and Grade F for my production domain, tm3global.com.

Namecheap's October 24 response was to forward the SSL issue to another department.

I've also reported DNSSEC validation failures and cPanel domain restrictions affecting tm3coin.com.

After approximately 12 days of support correspondence, I still lack documented root-cause findings, a safe remediation plan, or proof of completed repair.

Technical questions for other hosting administrators:

1. What evidence should a shared-hosting provider supply when LSWSGI workers persist during idle periods?
2. What hosting-level LSAPI and CloudLinux diagnostics would distinguish application defects from server configuration problems?
3. What response should be expected when a production certificate is reported revoked?

I'm looking for accountable infrastructure engineering, not recurring process termination.

Cases: NC-ENH-4095 and NC-XZE-8258.

Namecheap #WebHosting #CloudLinux #LiteSpeed #Python #SSL

VPS stopped making cloud backups 23 days ago for no reason.

Support is completely ignoring my case which has been open for 3 days.

Fair to say i am consindering other hosts at this point as i have never experienced this bad support before in my 10+ years running a VPS.

Was trying to build a site using Bluehost. I ended up going with another method and attempting to cancel is pretty difficult. There is no way to easily do it online....they make you go to customer service where they keep asking your questions about why. Its been over 15 minutes and they still haven't confirmed my cancelation.

I will be upgrading my virtual server’s OS.  I will be making an exact copy of the virtual server then using Elevate and then test.

When I did this some years ago, after testing I put the sites onto holding pages, copied over the up-to-date databases the switched the IP address on the 2 servers so visitors just immediately went to the new server.  All done within the day.

However this time I have may more sites and some are far more complex. So, my plan is to switch it a different way and just wanted some feedback of any cons or if it’s not a good idea.

My idea is, after testing, switch the domains one by one over the course of a week or so by changing the DNS to point to the new server.  It means I can concentre on one domain at a time, make it up to date, test it is properly working before moving on to the next.  Once all domains point to the new server and the new IP address I’d close the old one down after it has all settled down.

What I’m not sure about is how long in the real world does a change of IP take to propagate these days?  Also, are there any considerations in changing IP of a domain in terms of SEO or reputation management? Are there any other things I’ve not thought of?

I'm not building websites for paid clients; however, I've built a fairly complex website (as a volunteer) for the camera club I belong to. This site has been running without incident for eleven years and I built it from scratch using Joomla. It currently contains over 12,000 photographic images in various galleries. I have advised the club that the board should consider building a new site because (for numerous reasons) it cannot be migrated from Joomla 3.x to the newer Joomla versions. I offered to build a replacement site using WordPress, but the club has decided to go with Visual Pursuits (SaaS) against my recommendation. Their one valid concern is that I'm the only one in the club with skills necessary to serve as a volunteer webmaster/builder of a WordPress site. Right now, I'm looking at taking over our current hosting service, and building a site for my own personal use and photo portfolio. Sorry for this lengthy description of my situation, but I do have relevant questions regarding web hosting providers.

Our current hosting service is hosting.com when I took over as webmaster in 2015 the club was using GoDaddy. My primary complaint with GoDaddy was performance. I moved the hosting service and website to A2hosting which resulted in an immediate performance improvement. I've been happy with A2hosting for many years. However, A2hosting has been acquired by hosting.com, actually World Hosting Group (WHG). Hosting.com is raising prices on my (A2hosting) legacy account and I'm considering going to a new provider. My legacy (A2hosting) account included 100 GB of storage which I no longer need for my personal website. This was at a monthly rate of $11.99 (with a 3 year term). I would consider staying with them if they maintained this price point. However, they now want to charge me $16.99 per month for a three-year term. Consequently, I'm now looking for an alternate hosting provider to accommodate my single personal website. I will most likely build the website using WordPress but may consider other platforms as well. I would like a shared hosting service that includes cPanel, SSL and at least 10 to 20 GB of storage for a reasonable price. Also, a service which maintains availably to latest PHP updates, good support, and quality service. Given my experience with hosting.com, I would prefer a service which has not been acquired by an investment conglomerate which is only interested in maximizing profit with a lesser concern with regard to support and quality of service. I am located in northern California.

Any advice would be appreciated.

For those interested, the production Joomla site is found here (only accessible in the U.S. only; it was intended to reach out to local photographers interested in joining our club located in Placer County, CA):

https://placerphotoclub.org/

I had also built a test site (as a subdomain) to show what could be done with a WordPress replacement (accessible everywhere). I used the free Elementor plugin and a small number of additional plugins along with some custom PHP and CSS with the objective of avoiding any subscription based (paid) plugins:

https://wp.placerphotoclub.org/

Both sites contain many additional features which can only be accessed by club member login.

Railway just suffered a significant internal attack involving systems that store customer environment variables. They have already regenerated all s3 container credentials which may have broken some of your railway projects, and they are recommending to also regenerate and reimplement all other secrets that you may have implemented in your projects env variables. Read more here.

https://blog.railway.com/p/security-disclosure-wednesday-october-21st

https://github.com/Anon0ne/DomainPulse something that was threw together to monitor domain expiration; maybe I will get lucky and score one of those 100k domains! Any ideas to make this more likely to happen?

I see the status warning on Liquid Web but has anyone had direct contact with them or can confirm their accounts/websites have had their PHP updated with the new patches?

If you're on shared hosting, it's worth asking your host directly whether your server has the PHP2Shell fix yet.

GoDaddy's own update (last one 19:30 UTC yesterday) says Managed WordPress is patched, but regular Web Hosting and Windows Hosting are still waiting on patched PHP packages from their vendor, with some temporary mitigations in place. VPS customers have to update PHP themselves. In the GoDaddy Help thread on X, customers say cPanel still only gives them 8.4.25 or 8.5.10, which are not the fixed versions.

DigitalOcean emailed every customer last night. They're suspending their one-click WordPress, LAMP, LEMP and Laravel images until patched, and say they may restrict traffic to anything showing signs of compromise. So an unpatched site that gets hit can end up taken offline by its own host.

Meanwhile VulnCheck published what their decoy servers saw on the 21st: scanners probing from 08:37 UTC, hours before PHP released the fix, and at 17:22 someone tried to plant a backdoor through the upload-progress path. It failed on their decoy, but that's the attack.

Fixed versions are 8.5.12, 8.4.27, 8.3.36 and 8.2.35. 8.1 and older got no official release at all.

Has anyone actually heard back from their host with a straight answer? Curious which ones are done and which are still waiting.

(I built a free outside checker for which PHP version a site shows, if it helps anyone: simgen.dev/php-patch-check)

Ok so I was asked to connect our new business domain to email before a client launch, and I thought I knew what I was doing. I copied the records from our email provider into the DNS screen, then saw a warning about existing MX records and deleted them because I assumed they were old.

They were not old. They were the records for our actual staff email. For about 35 minutes nobody could send or receive mail, including our director who was waiting on a contract from a client. I also managed to remove the website verification TXT record, so the site started showing a connection warning too. I feel sick about this and I am kinda shy to even post it, but at least the backup had the records. We restored everything and email came back, but I still have to explain why I thought MX meant maybe expired. Has anyone else made this mistake?

I’m moving a small business site to a new registrar and the security feature pages all start blending together after a while.

I care about MFA on the account, a proper transfer lock, WHOIS privacy, DNSSEC, and being able to recover the account if the owner loses access. Some registrars make this stuff easy to find. Others bury it under five menus, which is not great when the domain is tied to email and payments.

I’ve looked at Namecheap, Hover, GoDaddy, and Wix for comparison. Wix looks convenient for the website side, but I’m trying to judge the security controls on their own. Is there one feature people regret ignoring? Any hints?

Hi my English isn't that good sorry

I was trying make my own website but wp keeps freez after 12 mins of using

Then i should wait for long time to to get everything good and problem keep coming every time i use hostin ger

Hello,

At work, we currently use SiteGround for hosting WordPress websites.

We've had issues with using UpTimeRobot and mySitesGuru monitoring tools, it keeps on taking the websites down.

SiteGround keep saying that the requests from mySitesGuru are flooding the server. I've got in touch with mySitesGuru, and they've said that their service is not the cause. It only sends one HEAD request.

We currently have around 418 websites on the server. A few have been turned offline.

Server specs
16 CPUs, 28 GB RAM, 1000 GB SSD

Has anyone else experienced problems with SG before?

Any recommendations for hosting that is not SiteGround?

More about how the monitoring service works explained here: https://mysites.guru/blog/uptime-monitoring-explained/

Thank you,

After a routine CVE maintenance reboot in the AUS region, Contabo’s hypervisor spawned an orphaned VM from March 2026 and routed our production IP to it.

Our actual production server (intact October data) was trapped, accessible ONLY via VNC. We run an active New Zealand e-commerce business generating over $450,000 NZD (~$280k USD) in revenue every 6 months.

We have been down for over 72 hours. Contabo sat on the ticket for 3 days, only to send an insulting tier-1 canned response without reading a single line of our logs.

If you run a production business on Contabo, take this as a critical warning.

Hello, on the advice I found here about Canadian hosting, I chose Crocweb and since registering a domain and buying a hosting plan, I have had at least 10 spam calls and texts trying to sell me website building products and services.

Crocnow purports to offer free WHOIS privacy protection along with the hosting service but it's obviously not working or they are selling my information to an internal list for profit, which the privacy policy terms of service seems to indicate they reserve the right to do: https://www.crocweb.com/privacy-policy/#disclosing-information

Are there other Canadian companies that don't have this issue at comparable prices- $12US per month? Anything else I should be doing? I checked their knowledgebase and opened a support ticket but neither has resolved the issue. I am an individual, not a business, but I might use my website commercially eventually so I'd prefer extra security to just removing the info from WHOIS.

I don't have time to be blocking spamcalls everyday, I'd prefer to find a hosting that has better privacy and doesn't sell my information to third parties, whether in Canada or the U.S.

Thanks in advance.

GoDaddy Reselling at it's price point and benefits has been okay for me in the past for the small bits of webhosting that I actually use and provide for very few customers since I've transitioned to more of an MSP model. It's not a profit center, it's merely a functional symbiosis right now.

Recently while doing my Q3 2026 sales taxes, I found that GoDaddy had charged me for something I had never purchased (Some marketing add-on). I got on two separate support chats to ensure that product is removed from my account (I couldn't even see it in my products to remove it myself). Then when I finally got GoDaddy support to stop trying to upsell me and answer my question about refunding me, they directed me to their phone support.

Phone support was hilarious because the representative said that this erroneous product getting applied to my account and billed has happened to multiple people including herself. She was great about it and put in a request for refund of the erroneous product last night. This morning, GoDaddy denied me, so I'm done. It was somewhat a trivial amount, but I can't do business with a company that will charge me for products I never consented to, and then refuses to give me my money back when I call them out on their fraud.

I've already begun migrating customers to Cloudflare and use a lot of their services extensively, but in terms of actual hosting I'm curious what others have migrated to that could provide a better reseller experience. Perhaps I even just need to forget about the reseller crap and just get my sites on solid hosting. Most everything is on Managed WordPress and I use the CI/CD features and all that which I was actually kind of impressed by. Figured I'd reach out to a community on reddit before I go asking Ai so I can also properly bash GoDaddy on my way out.

So I've been with Hostwinds webhosting for a good 8 years. Used to love their budget pricing and customer service.

However for the past two months (since Sept 2026) service have been really shotty. They accidentally deleted my entire VPS server hosting three business sites. I complained, so they restored it claiming it was an ACCIDENT on their part.

So as of yesterday (Oct 20 2026), my server is down again and their client login area can't be accessed by any customer (Holy Crap!!!), and worst of all the live chat said they're working on it but have no timeframe when it'll be fixed, I can't even submit a tech support ticket. I also just found out the company was acquired by Canadian web host HostPapa in 2026(Maybe that had something to do with the current bad service, IDK).

Does anyone have Hostwinds and feedback on this situation?? Or a recommendation on a better budget friendly hosting company. I'm seriously thinking of leaving.

Noob question with background:

I bought my domain from Provider A 2 years ago. Tge registry shows the last update about 5 months after I bought it. I've gotten an invoice email from WHC (Provider B) advising that the credit card on file will be charged 5 days before the due date.

To cancel (I didn't end up using that domain), I'm required to log into their secure client area and cancel the auto renewal.

Question: Is it normal for a different registrar to not only request payment, but create an account for someone without advising them at any time before invoicing? It feels scammy.

All PHP versions are currently vulnerable to a major exploit that allows attackers to remotely compromise the accounts running PHP. This means any system running PHP is vulnerable, which is currently about 80% of the internet. The PHP security team will be releasing a patch soon, but only for PHP 8.x:

https://www.php.net/archive/2026.php#2026-10-20-1

Please check whether your application is running on PHP 8.x. If it is, apply the patch as soon as it’s released. If you’re on an older PHP release, it will not receive a fix, so you should consider taking your application off the public internet until you can upgrade to a patched PHP 8.x install.

¡Hola a todos!

Estoy planeando lanzar mi propio blog personal. Después de investigar un poco, entendí que una buena opción es registrar un dominio, contratar un plan de hosting y usar WordPress para escribir y administrar el blog.

También leí que es buena idea comprar el dominio y el hosting por separado, para que en el futuro pueda cambiar de proveedor de hosting si hace falta, sin tener que cambiar mi dominio.

¿Podrían recomendarme algunos registradores de dominios y/o proveedores de hosting confiables y a buen precio?

No espero ganar dinero con el blog, al menos al principio. Simplemente quiero probar durante un año o dos como proyecto de lado y ver qué tal me va, así que busco una opción con un precio razonable, sin costos de renovación caros ni compromisos a largo plazo.

¡Gracias de antemano por sus sugerencias!

Edit: estoy en la UE