My osticket is still v.17.something. For the php vulnerabilities out now, I can just turn off the whole server. That's one option for a "now" solution until it's fixed. (And in this case, the osticket server isn't used much, and there are other workflows so it's not dire.)
That's osticket running on IIS though on a Windows Server. If I just turn off that website is IIS would that also prevent any php vulnerabilities if my php version is still old? The osticket website wouldn't be running so would think so, but I'm not 100% sure. It's a little out of my normal work area. If just the osticket website can be shut off and prevent issues right now, that allows other people to continue to work on that server for other things (although, it's not critical that they do that right now.).
I'm not going to get to updating php for my osticket set up in the near future, so shutting the server down entirely is one option. But is just shutting off the osticket website also an option but not as severe as shutting down the whole server?
