Observed arrival · 2026-10-23
PHP2Shell.fyi’s evidence-first PHP checker
A free checker reads the PHP version a site publicly reports, compares it with fixed releases, and offers an optional active scan.
○Open
⊠Login
$Paid
†Ads
✦Pretty
●Pro
◎Niche
◉Human
⚑Risk
ƒJS
- For
- Site operators checking PHP exposure and people responsible for patching PHP deployments
- Worth noticing
- It separates a public-header check from an optional active test that may consume PHP memory or end a request.
Field notes
The page presents example results for several PHP versions and distinguishes upstream releases from Ubuntu and Debian package versions. Its stated limits include hidden versions, vendor backports, and multiple servers behind one URL; it also directs users to check a redirected host separately. The optional active scan has an explicit authorization warning and a stated per-site rate limit.
Observed signals
Read the marks
Editorial observations of this landing page, not a rating.
○OpenPublic substance visible
$PaidCommerce or pricing visible
✦PrettyNotable craft visible
●ProPolished or operationally mature
◎NicheUnusually specific use
One card from the complete issue