The Daily Inference
Culture & Games · News

Locked-out Final Fantasy XIV players water strangers' crops

When Square Enix suspended new logins to its online game for about a day during a PHP security emergency, players still inside offered to tend the in-game gardens of those shut out. They asked for nothing in return.

Follows If Your Site Runs PHP, Patch It Now: Outsiders Can Run Code Without a Login.

When Square Enix shut the door on new Final Fantasy XIV logins for about a day, the players still inside the game began watering the gardens of strangers who could not get in.

Square Enix says it unexpectedly suspended new logins from October 21 to October 22, 2026, while responding to a critical PHP vulnerability [2]. PHP is a programming language that runs underneath a large share of the web. The PHP project said it released fixes on October 21 for two critical flaws that could let outsiders run code on a server without logging in, and urged users to update [5].

The Daily Inference reported on October 21 that some operators had taken services offline while they dealt with the flaws. Final Fantasy XIV, a subscription fantasy role-playing game, was one of them. Nothing reported so far says the game itself was breached. The suspension was an emergency measure.

A service for strangers

The game was not empty. Players who were already logged in could still move around its world [1][3]. Those who were not could only watch from outside.

A Reddit post titled "PHP Watering Service" invited locked-out players to share the in-game locations of their homes, so that someone with access could water their plants [1][3][4]. Similar offers appeared on X [1][4]. Gaming outlets reported that watering another player's plants needs no special permission, and that the volunteers asked for no payment [1][4].

The offer meant something because of how the game's gardens work. They run on real-world timers, so a plant can need attention while its owner is offline [1][3][4]. Dexerto singled out the Thavnairian Onion, a crop that needs cross-bred seeds and five days to grow [4]. A gardener who invests that kind of patience has made a small promise to a clock.

The clock does not care about a security response. A missed window can cost a harvest, and that is the gap the volunteers stepped into.

What the company offered, and what the players did

Square Enix's own remedy came in writing a day later. In a Lodestone notice dated October 23, titled "Compensation for Game Time Due to the Unexpected Suspension of New Logins", it said eligible full-version accounts with an active subscription on October 21 or 22 would receive one day of game time [2]. It added that compensation and its amount may differ by operating region [2].

Polygon reported that the company also briefly paused housing auto-demolition during the incident, and planned to resume it on October 26 [1].

Set the two responses side by side. The company gave back a day of subscription, which is the correct and expected thing to do. The players gave their time to people they will probably never meet, and the plants stayed alive.

The size of the effort is unknown. The accounts do not say how many players asked for help or how many gardens were watered, and Square Enix has not commented on the volunteers. The story rests on gaming outlets reporting what players posted, not on a tally.

Why a watering can matters

It would be easy to wave this away as a cute detour from a serious story. I think it is the better half of the story.

The PHP flaws are a problem of infrastructure, the unglamorous machinery that everything else runs on. When infrastructure fails, people usually discover how little they can do about it. Nobody who played Final Fantasy XIV that week could patch a web server. What they could do was look at a map, find the address of someone who could not get home, and water an onion.

That is what a shared world is, once you take the spectacle away. It is a place where small routines and obligations accumulate, and where the people who keep them can hand them to someone else when they cannot. A garden that needs tending on a schedule is a chore, and a chore that others will take on for you is a form of trust. The game built the chore. The players supplied the trust.

It would be wrong to claim too much. A game does not replace a neighbour, a clinic or a government, and one outage with an unknown number of volunteers proves nothing about all online communities. But a pattern worth noticing sits underneath the story. More of ordinary social life now happens in places that a company can switch off for a day. When that happens, the people inside decide whether the place is still a community.

This time, by the accounts of three separate outlets, they decided it was [1][3][4]. That the volunteers were not asked to do it, and were not paid, is the whole point.

The next fact to watch is small and checkable. Polygon reported that housing auto-demolition was due to resume on October 26 [1], and Square Enix's compensation of one day of game time is still going out to eligible accounts, with the amount varying by region [2].

Our call

Square Enix will publicly acknowledge the player-run watering effort during the October 2026 login suspension in an official channel, such as the Lodestone, its official Final Fantasy XIV social media accounts or a producer letter.

Three gaming outlets covered the watering offers, but the company's only published word on the incident so far is a compensation notice that never mentions the volunteers.

Elena MarshElena MarshSenior writerWrites the long pieces that make people read to the end. Believes every story is a history story if you go back far enough, and usually goes back just far enough.Model: Claude Sonnet 5.5 says 15%. Jev says 24%.

By January 15, 2027. How we will check: A post, notice or broadcast from Square Enix's official Final Fantasy XIV channels that mentions players watering locked-out players' gardens or thanks the community for it, found on the Lodestone or the game's official social accounts by January 15, 2027.

Open · Every call we made

The story so far 2 pieces since October 21, 2026, in order

Topics: Games industry · Cybersecurity

Every edition in brief, three times a day, on our Telegram channel, on Bluesky and on Threads.

Sources
  1. Final Fantasy 14 Players Deliver Perfect Response to 2026's PHP Vulnerability Polygon
  2. Compensation for Game Time Due to the Unexpected Suspension of New Logins (Oct. 23) | FINAL FANTASY XIV, The Lodestone na.finalfantasyxiv.com
  3. As Final Fantasy 14's doors remain closed, surviving players are stepping in to keep everyone's crops alive | PC Gamer pcgamer.com
  4. Final Fantasy 14 players are watering locked-out strangers' crops so they don't die during outage - Dexerto dexerto.com
  5. PHP: News Archive - 2026 php.net