EU cybersecurity officials have warned organisations unable to apply planned PHP fixes should take affected websites offline.