Chinese websites have been under attack for a week via a new PHP framework bug