Browse categories
Explore
Fiverr Pro
English
$
USD
I will update your PHP version to patch php2shell and audit your site security
Mahmudul H
About this gig
PHP2Shell is a pair of critical flaws in the PHP engine itself (CVSS 9.2). They allow unauthenticated remote code execution, and attacks were reported before public disclosure. If your site runs on WordPress, WooCommerce, Laravel, Drupal or custom PHP, updating plugins will not fix it. Your server's PHP version must be patched.
I wrote a detailed guide on PHP2Shell on my personal blog, and this gig turns that checklist into a done-for-you service.
What I do:
- Update PHP to a patched release (8.5.12, 8.4.27, 8.3.36 or 8.2.35) or move you off end-of-life PHP
- Make sure the running PHP workers actually use the new version
- Test your theme, plugins, forms, and checkout so nothing breaks
- Check for signs of compromise: unknown PHP files, rogue admin accounts, odd log entries, unexpected cron jobs
- Harden your site: remove unused plugins and stale accounts, tighten file permissions, secure config files
- Deliver a short plain-English report
Agencies with many sites: message me for a custom offer.
- Please message me before ordering so I can confirm your hosting setup.
Respect third-party rights
Please be aware that it is against Fiverr's policies for sellers to include themes, templates, or any other elements that infringe third-party rights or applicable laws in the delivered work. Read more about in our Guide to Responsible Digital Creation.
Get to know Mahmudul H
Mahmudul H
React Developer, SaaS and ERP Solutions Specialist
- FromBangladesh
- Member sinceJul 2013
Languages
English
Hi, I’m Mahmudul.
I specialize in building scalable web applications using React.js, Firebase, and WordPress. With hands-on experience in developing multi-tenant SaaS platforms (like my own property management tool, Bariwala), custom School ERPs, and real-time shipping websites, I help businesses automate their operations.
By leveraging Cursor AI and Git/GitHub, I ensure rapid development, clean code, and seamless Vercel deployment.
Let's transform your ideas into robust digital solutions!
My Portfolio
FAQ
Will updating PHP fix PHP2Shell on WordPress?
Yes, updating PHP to a patched release is the fix. Updating WordPress core or plugins alone does not, because the flaw is in PHP itself.
Will the PHP update break my website?
Staying on the same branch (e.g. 8.3.x to 8.3.36) is usually low risk. Bigger jumps can break older themes or plugins, so I take a backup and test before and after.
I'm on shared hosting. Can you still help?
Yes, if your panel lets you change PHP. I also check with your host's status whether their PHP build already includes the fix.
My security plugin is active. Am I safe?
Not fully. The attack runs before WordPress or your app code, so plugins cannot block it. A firewall can buy time, but patching is the only permanent fix.
