Who runs this site?
PHP2Shell.help is an independent community project. It is not affiliated with, endorsed by or operated by The PHP Group, any Linux distribution, any hosting provider, or the researchers who found these vulnerabilities. Product and company names belong to their owners.
Is this professional security advice?
No. The pages explain PHP2Shell and link to official sources so you can act quickly, but they are general information, not advice for your specific systems. For decisions about your servers, rely on the PHP security announcement, your OS vendor’s security notices, and your hosting provider. If your site handles payments or personal data, consider a qualified security professional.
What does the PHP2Shell checker promise?
The PHP2Shell checker compares the details you enter with published fixed releases and vendor packages. It does not test your server, does not detect exploitation, and cannot see other sites, worker pools or containers. A “matches a fixed release” result means only that the version you entered is at or above the first fixed release; it is not a guarantee that a site is secure or has not been compromised.
Is there any warranty?
The site is provided “as is” and “as available”, without warranties of any kind, express or implied, including accuracy, completeness, fitness for a particular purpose and non-infringement. Facts can change quickly during a security event; each page shows when it was last verified and the changelog records corrections. To the extent permitted by law, the operators are not liable for any loss or damage arising from use of, or reliance on, this site.
What about links to other sites?
Pages link to official advisories, vendor documentation and research. Some links are clearly labelled partner links. Other sites are responsible for their own content, availability and privacy practices. A partner relationship never changes a verdict or a recommendation.
What may I not do?
Do not use this site or its content to attack, scan or access systems you are not authorised to test, or for any other unlawful purpose. Do not attempt to disrupt the site, overload it, or bypass its security controls.
Can I quote or reuse the content?
You may quote and link to pages with attribution to PHP2Shell.help and a link to the page you used. Facts come from the cited official sources; please cite those sources too.
Will these terms change?
Yes, when the site or the facts change. Updates take effect when published and are recorded in the changelog. Contact: support@php2shell.help.
Check your PHP for PHP2Shell
Enter the version your website reports. We compare it with the first fixed release for its branch and tell you what to do next.
PHP2Shell checker →Sources
The core facts on this page (fixed versions, CVE details, vendor packages and agency warnings) come from official sources. Research, news and community posts are labelled as such.
- Security advisory: Critical remote code execution vulnerabilities, update nowOfficial The PHP Group