PHP2Shell Security Bulletin — Download PDF

Urgent security bulletin · 22 October 2026

PHP2Shell: what website owners need to know

Understand the risk, what an online check can and cannot confirm, and how your IT provider should check, back up, patch and test your site. Includes a detailed technical appendix.

Download security bulletin (PDF)Run the free website check →

4 pages · PDF · 268 KB · Free download, no account required.
Complete service checks and patching involve a cost; agree scope and charges with your IT provider.

Practical infrastructure diagnostics

Free tools to check your email, websites and network.

Focused tools for mail, DNS, certificates and network reputation—built to show the evidence behind every result.

Test your internet speed →

Urgent · current checkerEmergency PHP security · No account neededPHP2Shell CheckInspect public PHP version evidence, compare the emergency fixed releases and see what your host must confirm.Check PHP exposure Just for fun Anti-Spam ChallengeTen timed, server-checked questions. Choose simple, maths or computational-god mode. Take the challenge Your public connectionWhats My IP AddressSee your browser’s public IP address, network provider and approximate GeoIP location on a world map.Show my IP Your connection, measuredInternet SpeedtestPut your connection through its paces with download, upload, latency and jitter readings on steampunk instruments.Start your speedtest Home-page performanceWebsite SpeedMeasure a fresh browser load, page payload and latency, then compare connection speeds from 1 Mbps to 2.5 Gbps.Measure your site Live availability Is It Down?Check whether a website or public service responds, see response times and save services to your account watchlist. Check now Email deliverability MailCheckSend one message and inspect SPF, DKIM, DMARC, reputation and transport security. Open tool Message journey Email Header AnalyserDecode every recorded hop, delay and authentication result, then check public relays for current TLS, PTR and blacklist evidence. Open tool Domain + mail route DNS & MXCheck sender policy, every MX route, STARTTLS, SOA agreement and DNSSEC. Open tool Timestamped DNS evidence DNS Consistency & SPFTrace dynamic Hosted SPF, compare resolvers and authoritative endpoints, and count DNS query failures. Free account required TLS inspection TLS InspectorInspect mail and web certificates, chains, protocols, expiry and optional SMTP/IMAP authentication. Open tool Server reputation Blacklist ScanCheck one mail server or run a bounded recursive SPF-range reputation sweep, with PTR evidence and PDF reporting. Open tool Registration intelligence WHOIS LookupCheck authoritative registration, expiry, registrar and publicly available ownership data through RDAP or WHOIS. Open tool Public network intelligence Network DiagnosticsCheck host availability, common services, UK latency, traceroute, an opening-page JPEG, GeoIP, ASN and abuse contacts. Open tool Private browser utility Sensible PasswordsGenerate memorable word-based passwords with optional capitals, numbers and special characters. Open tool