A PHP security flaw took websites offline in Luxembourg Wednesday, raising fears of data theft despite expert reassurances.