The Netherlands, Finland, France and Australia took some public websites offline on Wednesday while they patched PHP. Denmark even shut its national school messaging platform as a precaution. Amazon now says an unknown attacker tried the flaw on October 17, four days before it became public.