Patch help

We’ll patch PHP2Shell on your server

You shouldn’t have to become a sysadmin overnight. We upgrade PHP to a fixed release, restart it properly, and prove the patched version is the one serving your site — then send you a short written report.

Request a quote Book a 30-min call
Pricing

Simple, fixed prices

Your final price, including any taxes, is confirmed in a written quote before work starts. Not sure which you need? Start with the triage call — if you then go ahead with a patch, we deduct it.

Triage call

€49 / 30 minutes

We look at your setup together and you leave with an exact, written patch plan.

  • Find the PHP that really serves your site
  • Patch plan for your OS / panel / host
  • Answers on mitigations & compromise checks
Book a call

Complex setups

from €249 / scoped on a call

Several servers, containers, cPanel/Plesk fleets or old PHP that needs a careful upgrade path.

  • Multi-server & Docker/Kubernetes
  • EOL PHP upgrade planning
  • Post-patch compromise review
Ask for a quote
Request a quote

Tell us about your setup

We reply within one business day with a written quote. If the issue is urgent, you can pay for a priority response on the next screen so an agent reaches out as soon as possible.

  • Not sure about your PHP version? Leave it blank.
  • Several servers or containers? Choose Complex setup.
  • On shared hosting? Choose the triage call.

We use these details only to answer your request — see our privacy policy.

Want this handled first?

We’re getting a lot of requests. If yours is urgent, pay and an agent will reach out as soon as possible.

This is a priority response fee. For the patch and complex packages, the final job price is still confirmed in a written quote.

Pay for priority
How it works

From “are we vulnerable?” to “verified patched”

  1. Request a quote

    Fill in the form with your platform, how many servers and a time window. You get a written quote with the final price.

  2. Authorise & give access

    You confirm in writing that you’re authorised, then create a temporary login using our step-by-step instructions.

  3. We patch & verify

    Backup check, PHP upgrade, proper restart, and a check that the fixed version is what serves your site.

  4. You get a report

    What we changed, versions before and after, anything suspicious we noticed, and how to remove our access.

Included

  • Identify every PHP runtime serving web traffic on the server
  • Upgrade to a fixed upstream or vendor release
  • Restart PHP-FPM / Apache / LiteSpeed and confirm new workers
  • Verify the live version and basic site health afterwards
  • Quick look for obvious compromise signals from 17 October onward

Not included

  • Penetration testing or a security guarantee
  • Application code changes or major framework upgrades
  • Full incident response (we’ll refer you if we find a breach)
  • Servers you aren’t authorised to administer
FAQ

Before you book

What access do you need?

Usually a temporary SSH user with sudo on the server (or a hosting-panel login). We send you exact, copy-paste instructions to create it — and to remove it afterwards. We never ask for your personal passwords by email.

Do I need to authorise the work in writing?

Yes. Before we touch anything you confirm, in writing, that you own or are authorised to administer the server and what is in scope. This protects you and us.

What if something breaks?

We confirm a recent backup or snapshot exists before changing anything, and we stay within your agreed maintenance window. If an upgrade causes a problem we roll back and tell you exactly why.

How does payment work?

Sending the request is free, and the final job price is still a written quote. If the issue is urgent, you can pay the package amount after the form (€49, €79 or €249) so an agent reaches out as soon as possible. That priority fee is not a substitute for the written quote on larger jobs.

Is this a penetration test or a security guarantee?

No. It’s a hands-on patch: we bring PHP to a fixed release and verify it’s the version serving traffic. We also look for obvious signs of compromise, but no one can guarantee a server is free of every threat.

What if my site is on shared hosting?

Then only your host can patch PHP. Choose the triage call and we’ll tell you exactly what to ask your host for — or help you move to a setup you control.

How fast can you start?

Usually within one business day. Add your timezone and preferred window in the form.

Services are provided under our terms. Prefer to do it yourself? Our free patch guides cover every common setup.