Government websites and online services were disrupted after concerns about a PHP bug that could allow attackers to take control of vulnerable servers.