This site is not affected by the PHP vulnerabilities disclosed in October 2026

We would like to inform you of the impact on this site of the critical PHP vulnerabilities (CVE-2026-109618, CVE-2026-109619) disclosed on October 21, 2026.

This site is built and operated without using PHP. Since PHP is not installed on the server, this vulnerability does not affect us.

To protect our members’ personal information, we continue to implement the following measures on this site.

• We automatically apply security updates to our servers every day.
• We check the software used on this site for known vulnerabilities every day.
• We back up our data every day.
• We temporarily lock accounts after repeated failed login attempts, and we use protection against automated submissions by bots. We send you a notification email whenever someone logs in to your account.
• Two-factor authentication is required for administrator logins.
• We do not store credit card information on this site; payments are processed by our payment processor (Stripe).

If you cancel your membership, we will promptly delete any information that can be used to identify or contact you—such as your name, contact information, address, profile picture, and identification documents—(excluding payment records and other information required to be retained by law). Please see our Privacy Policy for details.

If you have any questions, please contact us via the contact form.