Observed arrival · 2026-11-04
PatchRig’s PHP2Shell exposure check
Credibility concern recorded. The source reference remains available for verification and correction.
PatchRig offers a no-sign-up, read-only exposure scan for PHP sites, alongside paid assessment, remediation, cleanup, and monitoring services.
- For
- Owners of PHP, WordPress, and Laravel websites
- Worth noticing
- The page describes a read-only scan, remediation on a staging copy, checks for earlier break-ins, and a dated confirmation report.
Field notes
The intake asks operators to identify their PHP version and hosting arrangement, with choices ranging from managed hosting to a server they manage themselves. A displayed example report labels shop.com.au as exposed on PHP 8.1.2 and shows two findings as fixed and confirmed; the extract does not establish whether this is a real customer report or an illustration. The page also lists versions it says have fixed builds.
Observed signals
Read the marks
Editorial observations of this landing page, not a rating.
One card from the complete issue