Two critical PHP flaws let attackers take over web servers without logging in. Learn affected versions, how PHP2Shell works and what to do now.