Exactly!
Unfortunately my static HTML is pre-rendered by a PHP engine before being served.
That's not a problem - as long as the PHP scripts are not reachable by the general public you should be fine, generally speaking.
These particular vulnerabilities affect PHP scripts accepting POST requests as far as I've been able to gather so far.
You might want to use Cecil ( https://github.com/Cecilapp/Cecil )
It's a static web site generator, powered by php :)
That's not a problem - as long as the PHP scripts are not reachable by the general public you should be fine, generally speaking.
These particular vulnerabilities affect PHP scripts accepting POST requests as far as I've been able to gather so far.