A critical vulnerability in PHP, the programming language underpinning much of the web, has forced government and business websites offline and triggered a worldwide effort to patch exposed systems.