Browse categories
Explore
Fiverr Pro
English
$
USD
I will patch php2shell on your linux or windows server the same day
Microsoft 365, Intune and cloud migration engineer with over 25 years
I am an infrastructure and migration engineer with more than 25 years of hands-on work. I move organisations to Microsoft 365, Azure and AWS, and I set up Intune and Windows Autopilot so devices are m...
About this Gig
Two critical flaws in PHP, made public on 21 October 2026 (CVE-2026-109618 and CVE-2026-109619, known as PHP2Shell), let an attacker run their own code on a web server without logging in. The PHP project rates both 9.2/10 and says updating is the only safe choice. Reported by BBC News, CNN and CNBC on 21-22 October.
On your own Linux or Windows server (VPS, cloud or dedicated), the update is yours to apply. I apply it for you.
Message me your website address before you order. I tell you free whether your server needs the fix.
What the Quick Fix includes, for one server:
- A backup before any change
- PHP updated to a build that carries the fix (php.net's build on Windows), every PHP worker restarted
- Your site checked afterwards
- Logs since 21 October checked for signs of attack
- A PDF report of what was found and done
Access: a temporary hosting-panel or SSH login (Linux), or Remote Desktop login (Windows), removed when the job is done.
On PHP 7.4, 8.0 or 8.1, where no update carries the fix, I build the PHP project's published fix for your version or move you to PHP 8.2 or newer: a fixed price from $529, sent as a custom offer before any work starts.
Operating system:
Windows
•
Linux
FAQ
How do I know if my server needs this?
Message me your website address before ordering. I look at what your site shows publicly and tell you free. Nothing is tested against your server.
My host manages PHP for me. Do I need this?
Usually not. Managed and shared hosts normally patch PHP themselves. Check your host's status page first.
Why not just check the PHP version number?
Linux distributions often add the fix without changing the version number. I check the installed package itself.
I'm not technical. Can you still help?
Yes. Message me your website address and I tell you in plain words what is needed. When you order, you can write anything you need help with.
I have never set up SSH. How can you get in?
One of these, removed when the job is done: a temporary hosting-panel login (cPanel or Plesk) or SSH user with sudo (Linux), or a temporary Remote Desktop (RDP) login (Windows Server), which I connect to from my side. Not sure how? Message me and I walk you through it.
