Cybersecurity researchers raced to patch a major flaw in PHP as details leaked online and attempted exploits surged.