PHP2Shell. Get your vulnerability patched ASAP.

PHP2Shell news got you sweating? If your business relies on PHP and you don't have a developer to call, figuring out what to update and whether it'll break is daunting. I help businesses running WordPress, Laravel and other PHP applications work through the upgrade. I've been working with PHP since 2012, old plugins, custom themes and a developer who’s moved on are familiar territory.

Get help with your site

PHP released critical security fixes on 22 October 2026. Read the PHP2Shell research and upgrade guidanceand The Colab's NZ vulnerability report .

An urgent update. A considered approach, developed through years of experience.

An old theme, a custom plugin or an ageing application can make a PHP upgrade feel risky. I help you work through those blockers so your site can run on a patched PHP release.

  1. Recreate your environment locally.

    I check your hosting, PHP version and dependencies, then replicate your environment locally so compatibility work happens away from the live site.

  2. Fix compatibility. Test what matters.

    I use agentic tooling to investigate legacy code, work through upgrade blockers and assist with testing. I review the changes and check the journeys your business relies on, such as logins, forms and checkout.

  3. Roll out the patch with a plan.

    We agree the changes, confirm backups and a rollback plan, then coordinate the PHP update with your host where needed. I check the running version and key site functions after deployment.

Already have a hosting alert? Include it in your enquiry. You don’t need to know your PHP version to get in touch.

More about Carl

Let’s get your site updated.

Tell me a little about your site. Minimum billing is 4 hours at NZ$1,000 total. I’ll respond to confirm availability and the next steps.

Your PHP support enquiry

This is an enquiry, not a booking or a payment. I’ll use these details to respond and confirm availability and scope before work starts.

Before you get in touch.

Is this for WordPress, Laravel or custom PHP?

Yes. This service is for small and medium businesses running WordPress, WooCommerce, Laravel or another PHP application without dedicated developer support. If you’re not sure what your site uses, send the URL and I can help establish the next step.

Will everything be finished within four hours?

Four hours is the minimum engagement, not a guarantee that every site can be upgraded in that time. Older code and unsupported dependencies may need more work. I’ll explain the blockers and agree further work with you before proceeding.

My host says PHP is patched. Do I still need help?

Ask your host to confirm they’ve applied both PHP2Shell fixes to the PHP package serving your site. If they have already applied the fixes and your site works correctly, you may not need this service. I can help when compatibility problems or legacy code prevent an upgrade.