PHP security updates and website repairs
Get your PHP website updated and working
Get hands-on PHP update help for WordPress, AWS-hosted applications and custom websites. We prioritise urgent requests and repair compatibility problems so customers can enquire, book and buy.
For PHP2Shell, the work starts with the PHP runtime actually serving your website. We help install the appropriate security update or move to a supported runtime, repair affected application code and test the customer actions your business relies on. Include your website and hosting platform, even if everything still appears to work.
Confirm the PHP runtime and apply the fix
We identify the web-serving PHP installation, its package source and the update that covers both PHP2Shell vulnerabilities. With authorised hosting access, we apply the runtime change and check that the running workers use it. On managed hosting, we work with the provider responsible for that change. A CLI version or an older-looking vendor version alone does not establish patch status.
Keep WordPress forms and WooCommerce orders working
Your PHP runtime, WordPress core, themes and plugins have separate update paths. We check compatibility and repair the code or connections affected by the PHP change. The checks follow a customer's actions: send an enquiry, receive a booking confirmation, add a product, pay through the provider's test flow and confirm the expected order.
Update the PHP workload you run on AWS
We help with PHP workloads on EC2, Lightsail and Elastic Beanstalk, plus PHP in containers or Lambda custom runtimes. The update must reach the application that is running. That can mean replacing an instance or platform, rebuilding an image, redeploying a function or migrating a Bitnami installation. We check the selected route against the current AWS guidance and verify the application afterwards.
Check custom PHP code before customers depend on it
For custom PHP websites and applications, we check the framework, extensions and connected services against the proposed runtime. We prepare a recoverable copy of the code and data, use a separate test environment where available and repair compatibility faults. The release checks cover the pages and actions you need, including logins, uploads, API responses and scheduled work.
Leave with evidence of the update and the website checks
You receive the runtime or vendor-package evidence, a record of changes and the results of the agreed website checks. Enquiries should reach their destination, bookings should produce the expected record and orders should agree with the payment provider. Restoring an older application release must preserve a patched runtime; an unpatched snapshot is not a safe fallback.
Related guides
Planning the same decision from the buyer's side? These guides go deeper.
- PHP2Shell: PHP Security Update Help UKGet hands-on PHP2Shell update help for WordPress, AWS and custom PHP websites. Fix compatibility and check forms, bookings and checkout after the update.
- WordPress PHP Security Update: PHP2ShellGet help updating WordPress PHP, fixing theme and plugin compatibility, and checking WooCommerce checkout after PHP2Shell. Includes an editable checklist.
- AWS PHP2Shell: Lightsail, EC2 & BeanstalkGet PHP2Shell update help for AWS Lightsail, EC2 and Beanstalk. Check Bitnami, PHP packages and running workloads, then verify forms, bookings and checkout.
Questions, answered
Can you help with an urgent PHP2Shell update?+
Yes. We prioritise urgent PHP update requests. Send your website, hosting platform, any provider notice and the deadline you are working towards. Tell us whether customers are currently affected or you need the security update before a problem occurs.
Can you apply the PHP update as well as repair the website?+
Yes, with authorised access to a supported hosting setup we can carry out the PHP update and application checks. Where the hosting provider controls the runtime, it applies that change and we handle the website compatibility and customer-action checks alongside it.
Do WordPress, plugin or theme updates fix PHP2Shell?+
The fix must reach the PHP runtime serving web requests. WordPress core, theme and plugin updates have a separate purpose. We check the runtime or vendor-package confirmation and then test the WordPress website's important actions.
My host says the PHP update is already complete. Do I need more work?+
Ask for confirmation covering both CVEs and the runtime serving your website. If that is confirmed and the website works, an additional emergency patch may be unnecessary. We can help investigate an unresolved compatibility, enquiry, booking or checkout problem.
How much does PHP update help cost?+
The price depends on the hosting setup, current runtime, application dependencies and any migration or repair needed. Include those details and the website actions to check so we can quote for the work you need.
What if I suspect the website or hosting account has been compromised?+
Contact your hosting security team or an appropriate incident-response specialist promptly and preserve the evidence they request. We can help with application repair alongside that work. Keep passwords, access keys, raw logs and customer records out of the public enquiry form.
Get help with the PHP update your website needs
Share your website, hosting platform and deadline. Tell us whether the update is outstanding or a form, booking or checkout has stopped working.