Why this project exists
PHP2Shell Checker is an independent reference and browser-based version comparison tool for website owners, developers and operators. We organize published security guidance into practical, multilingual checks and repair steps. The website is free to use, requires no account, and does not offer an exploit test, professional certification or a guarantee that a server is secure.
Independence and research credit
The site is not operated by, endorsed by or affiliated with the PHP project, PHP Foundation, Wiz, OpenAI or Calif. Discovery and coordinated disclosure credit belongs to the original researchers and PHP security team. Product names identify the software discussed. We cite the research and write our own summaries; our illustrations are original explanatory assets.
How assessments are made
Manual checks compare full stable versions within the four published branches. Vendor builds need both CVE advisories; unknown builds stay unknown. The optional public website check collects reported versions and platform clues, never exploit proof. Missing headers, a CDN or one patched replica cannot establish safety for every runtime. Review dates describe editorial checks, not live threat intelligence.
Translations and language parity
The site is available in 18 languages. Version numbers, CVE identifiers and code remain unchanged across translations. Technical meaning takes priority over literal wording. If a translation appears ambiguous, compare the linked primary advisory and send a correction. None of the translations is an official translation of the PHP project’s security guidance.