Observed arrival · 2026-10-23
php2shell.run’s one-request PHP checker
Credibility concern recorded. The source reference remains available for verification and correction.
A free checker and patch-guide hub for two claimed PHP vulnerabilities, with tests for a website address or pasted PHP version output.
- For
- PHP site operators and server administrators
- Worth noticing
- It warns that Linux distributions may backport fixes without changing the upstream PHP version number.
Field notes
The checker has separate paths for a website address and for pasted version or CLI output. Its version guidance distinguishes upstream PHP numbers from distribution packages, noting that Ubuntu, Debian, and RHEL may backport fixes. The linked remediation material ranges from package changelog checks and container rebuilds to PHP-FPM restarts and Cloudflare WAF rules.
Observed signals
Read the marks
Editorial observations of this landing page, not a rating.
One card from the complete issue