PHP2Shell checking and remediation guides
Start with public HTTP indicators, then verify the running PHP version, patch source and update outcome on the server.
Choose a starting point
Online checker
Enter an authorized public URL and review seven requests individually, including responses and PHP indicators.
curl self-check
Run ordinary text-field requests from your terminal and interpret response headers and HTTP status codes.
Update PHP via BaoTa
Check the security updates offered by the panel, update the PHP version used by the site and restart its service.
Turn indicators into remediation steps
HTTP responses alone cannot prove vulnerability or patch effectiveness. Verify the server version, vendor backport guidance and worker restarts together.
Review server checksIndividual responses
Each check sends a separate request and displays its result, making methods and form types easier to compare.
Understand result limits
Status codes, PHP indicators and form responses are investigation clues; remote code execution is not tested.