Domain of One's Own v2 Migrations and the PHP2Shell Security Vulnerability
Situation Overview
In light of the recently disclosed critical PHP vulnerabilities, collectively known as PHP2Shell (CVE-2026-109618 and CVE-2026-109619), Reclaim Hosting is taking additional steps to ensure that all Domain of One's Own (DoOO) environments are updated and secure.
As part of this effort, we will be moving all eligible Domain of One's Own schools that have not yet transitioned to DoOO v2 onto the new platform. This includes all schools that do not currently rely on WHMCS for apex domain registrations and renewals.
For schools with specific configurations or dependencies that prevent an immediate migration to DoOO v2, including those relying on WHMCS for domain management, we will be reaching out directly to discuss the next steps and ensure their environments are appropriately secured.
What does this mean for your institution?
If your school is currently running the original version of Domain of One's Own and does not depend on WHMCS for apex domain registrations and renewals, you can expect to be migrated immediately to DoOO v2 as part of this security initiative.
Our team will be coordinating these migrations to minimize disruption while prioritizing the security and stability of your hosting environment.
The recent PHP2Shell vulnerabilities underscore the importance of keeping the underlying software and infrastructure of our hosting environments up to date. Moving remaining eligible institutions to DoOO v2 is an important part of that effort, alongside applying the necessary security patches.
We appreciate your patience and understanding as we work through these upgrades. If your institution requires special consideration, our team will be in touch directly.
What to Know After Your Migration to DoOOv2
As part of this security initiative, eligible Domain of One's Own institutions have been upgraded from the original version of DoOO to DoOOv2. While these migrations were completed on an accelerated timeline to address the PHP2Shell vulnerabilities, we also wanted to share some information about the new platform and what you can expect moving forward.
What's new in DoOOv2?
DoOOv2 is a major improvement to the Domain of One's Own platform, replacing the legacy WHMCS setup with a single WordPress plugin. The updated platform includes:
- Simplified account sign-up for your users
- A unified administrative interface for account management, reporting, and settings, all within WordPress
- Enhanced security, performance, and scalability, including PHP-FPM and OPcache
- Greater flexibility for your portal's appearance, with support for any WordPress theme
- Built-in collaboration features and enhanced multi-account support
What has changed for your DoOO service?
Following the upgrade, there are a few things to be aware of:
- New account sign-up and cPanel login: Users will now access these features through the new DoOOv2 dashboard interface. See our DoOOv2 Dashboard documentation for more information.
- Account management: Administrators can manage accounts through a unified interface within WordPress. See our DoOOv2 Accounts documentation to learn more.
- PHP versions: Older PHP versions have been removed, and PHP 8.2 is now the default version.
- Your existing portal: The front end of your WordPress site will look the same as before the upgrade.
- Single sign-on (SSO): Your existing SSO configuration remains unchanged.
- Server configuration: All other aspects of your server configuration remain unchanged.
Learn more about DoOOv2
For a more detailed overview of the new platform and its features, visit our Domain of One's Own v2 documentation.
You can also watch the recording of our recent workshop, What's next for Domain of One's Own?, for a walkthrough of the new features.
We understand that these migrations happened on a shorter timeline than our usual upgrade process, and we appreciate your patience as we work to keep your hosting environment secure. If you have questions about the changes or need help navigating the new interface, please don't hesitate to reach out to Reclaim Hosting support.
