Of note: https://mastodon.social/@Girgias@phpc.social/117476477662524828

This PHP core member says there’s no way to fully mitigate this problem without a patch. This means that the safest thing to do is to block all php-related access from your site until a patch is actually published.