Gig · from $40
PHP security update and upgrade: patch PHP2Shell and old PHP versions
Every PHP install you run found, patched or upgraded, restarted and verified, with a short report of what was changed.
- php security update
- php2shell
- php upgrade
- php-fpm
- server patching
Basic
$40
One server
Check and patch PHP on one server or hosting account, restart PHP-FPM or Apache, verify the running version and send a short report.
- Delivery
- 1 day
- Revisions
- 1
Standard
$90
Fleet
Up to 5 servers or container images: find every PHP install, patch or rebuild, apply interim settings where an update must wait, and review logs for signs of attack.
- Delivery
- 2 daysor 1 day (+$30)
- Revisions
- 2
Premium
$220
Upgrade
Upgrade one application from PHP 7.4, 8.0 or 8.1 to PHP 8.4: fix deprecations and errors, test the main flows and deploy.
- Delivery
- 5 daysor 3 days (+$60)
- Revisions
- 3
Before you order: Contact me first with the number of servers and how PHP is installed, so I can confirm the right package.
What you get
- Every PHP install found, including the ones behind the web server, not just the command line
- Updates applied from your distribution, official images or upstream, matched to your setup
- Workers restarted and the running version verified through the web server
- Interim settings from PHP's advisories where an update has to wait
- A short report: what was found, what changed, and anything still to do
Who this is for
- Teams that need PHP2Shell patched today and cannot spare the time
- Agencies and freelancers with many client sites on different hosts
- Businesses still on PHP 7.4, 8.0 or 8.1 with no upstream fix
- Anyone unsure which PHP their site actually runs
- PHP versions
- 5.6 to 8.5
- Setups
- Ubuntu · Debian · Docker · PHP-FPM · Apache mod_php · cPanel
How it works
01
Share access
Send SSH, control panel or deployment access for the servers in scope. I start by listing every PHP install and its version.
02
Patch and verify
Apply the update or rebuild, restart workers, and confirm through the web server that the patched PHP is the one serving requests.
03
Report
Receive a short written report and remove any temporary access you granted.
Common questions
Can you patch PHP2Shell on shared hosting?+
On shared hosting the provider controls PHP. I can switch your site to a patched or newer PHP version where the control panel allows it, verify what is running, and tell you exactly what to ask your host for if it does not.
Will updating PHP break my site?+
A security update within the same branch, such as 8.3 to 8.3.36, rarely changes behaviour. Moving from 7.4 or 8.0 to 8.4 can, which is why the Upgrade package includes fixing errors and testing the main flows.
Do you need root access?+
For servers you manage, yes, or a user that can install packages and restart services. For containers, access to the repository and the deployment pipeline is enough.
What if I find signs of compromise?+
I will stop, tell you what I found, and recommend rebuilding the server and rotating credentials rather than cleaning it in place.
Part of Legacy Code & Debugging. Need something bigger than a package? Custom projects are scoped individually.
Related guide
More gigs
Not sure which package fits?
Describe what you need and I'll recommend one. Free scoping call, clear quote within 48 hours.
Book a call