Websites across world hit by millions of attempts to exploit PHP code flaw