PHP problems fixed, without the panic
Is your website broken, or running on outdated software that puts it at risk? We explain in plain language what is going on and what to do now. A person replies within one business day.
One team for the emergency and the cure
Website Without PHP is a service of Monkey Vision B.V. in Nijmegen. We fix what is urgent, then remove the cause so the same scare does not come back.
- Emergency fixYour site is down or broken right now. We get it stable first, then explain in plain language what we found.
- PHPPHP is a programming language that builds your web pages on the computer that hosts your site, just before they reach the visitor. WordPress runs on it. updateMove to a safer version of PHP, tested on a copy of your site first, with a way back if something goes wrong.
- Rebuild without PHPRebuild the site so it no longer needs PHP at all, so there is no PHP left to keep patching.
- PHP Services: Fix, Update, Migrate or RebuildPHP services from one team: emergency fix, PHP update, migration and a rebuild without PHP. From-prices on every page, reply within one business day.
- PHP Emergency Fix for a Broken WebsitePHP emergency fix for a site that is down, broken after an update or on unsupported PHP. Excl. VAT, reply within one business day, Mon to Fri.
- PHP Update: Move to a Supported PHP VersionPHP update service: we move your site to a PHP versionA PHP version is a numbered edition of PHP, like 8.3. Each edition is looked after for a limited time, then gets security fixes only, then nothing. that still gets security fixes, tested on stagingA staging environment is a private copy of your website where you try updates first, so any mistakes happen there and not on the live site. with a rollbackA rollback means going back to the last version of your website that worked, after an update has gone wrong. plan. All prices excl. VAT.
- PHP Migration to a Modern Stack and HostPHP migration for sites on old hostingWeb hosting is the service that keeps your website's files on a computer that is always online, so visitors can open your site at any time.: supported PHP version, working plugins and updated code, with a rollback plan. All prices excl. VAT.
- Rebuild Your Website Without PHPRebuild your website without PHP on a static or edge stack such as AstroA static site generator, such as Astro or Hugo, is a tool that builds all the pages of a website in advance, so visitors get ready-made files. on Cloudflare. No PHP runtime left to patchA security patch is a software update that closes one known security weakness and adds nothing else, so installing it protects you against that problem.. All prices are excl. VAT.
A free check that only reads what your site shows in public
The PHP Exposure Check only looks at what your site already tells every visitor, such as the PHP version it shows. It never logs in and never scans for weaknesses. You see which version you run and whether it still receives security fixes, before you talk to anyone. Where the version is not visible, we tell you so instead of guessing.
- Free PHP Exposure Check (Passive, Headers Only)Free PHP exposure check. We read what your site shows in public, like a browser, and show your PHP version and whether it still gets security fixes.
- Check Your PHP VersionSee which PHP version your site runs: WordPressWordPress is free software for building and editing a website in your browser. It is written in PHP, so it builds each page when someone visits. Site Health, your hosting panel or php -v, or let the free Exposure Check show it from the outside.
PHP2Shell: the current status
Status: fixed releases available, update nowLast update:
The short version. Every line has its source and the time we checked it.
- Fixed releases
- PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35Source: php.net security advisory, checked
- PHP 8.1 and older
- No more updates from the PHP project. Assume these versions are affected too.Source: php.net security advisory, checked
- Exploitation in the wild
- Not confirmed by php.net or CISA (KEV). Cloudflare reports attack traffic, watchTowr (via The Register) sees exploitation attempts and CERT-EU reports circulating proof-of-concept code; none of these sources confirms successful exploitation.Source: CISA KEV, checked
- Domain
- Check
- Result
- Report
We are checking
We only read what your site already sends in public. This takes a few seconds.
- Looking up the domain
- Connecting to your site
- Reading the headers
- Identifying the platform
- Identifying the CDN or firewall
Adds platform, firewall or CDN, hosting and your previous scan. We add your result to the form. A person replies within 1 business day.
Details
- Website
- PHP
- PHP version
- Checked
Headers we looked at
What this does not tell you
Read how to find your PHP version yourself
Ask your hosting provider
Copy this question and send it to your hosting provider or developer. You do not need to give us an email address for this.
Which PHP version does this website use, and how do I check that in my hosting panel?
Where should we send your report?
You see the report below. The email version, ready to forward to your web developer, follows.
Your full report
- Website
- PHP
- PHP version
- Platform
- Firewall/CDN
- Hosting
- Previous scan
We add your result to the form. A person replies within 1 business day.