While PHP vulnerability patches are up to developers, experts say software updates by consumers can help ensure your system's security is current.