Two critical flaws in PHP, which powers a large share of the internet, prompted authorities and companies worldwide to take vulnerable websites offline.