PSA: turn off PHP now. Mitigations you find on the internet are not enough. Only patched release fixes the bugs. Exploits already in the wild. Watch php.net and your distribution update channels and only enable PHP after you install patched release. This is not a drill.