#660 by GitHub stars

openai/php2shell-checker

Check PHP2Shell patch status with local or server access.

History

Review weekly changes to SKILL.md before updating. Dates mark the weeks in which we observed each version; checks apply to the recorded commits.

View weekly changes

`skills/phpcheck-server/SKILL.md`

Week of Nov 2, 2026 · +0 / −0 lines

Before Network or broad shell → After Network or broad shell

ffcd3fc82e5b → ffcd3fc82e5b

Compare on GitHub

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Network or broad shell

First observation → ffcd3fc82e5b

No earlier version was observed for comparison.

Compare on GitHub

`skills/phpcheck-url/SKILL.md`

Week of Nov 2, 2026 · +0 / −0 lines

Before Network or broad shell → After Network or broad shell

ffcd3fc82e5b → ffcd3fc82e5b

Compare on GitHub

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Network or broad shell

First observation → ffcd3fc82e5b

No earlier version was observed for comparison.

Compare on GitHub

View on GitHub Add to my skills

Verified commit ffcd3fc82e5b404f2a04a95b2805ca7639d530fa

1.5kGitHub stars

9stars in 7 days

2skills in this repository

8commits in 30 days

Heat

4.4

Star growth, last 7 daysAhead of 76% of tracked repositories
Star growth, last 24 hoursAhead of 3% of tracked repositories
Rank movement, last 7 daysAhead of 29% of tracked repositories
Commits, last 30 daysAhead of 74% of tracked repositories
Accounts asking about it through MCP, last 7 daysNot available
Hot votes this weekAhead of 0% of tracked repositories

Heat never changes the order by stars, and sponsorship never touches it. How heat works

Stars over time

30-day change not yet available: not enough history.

Individual skills in this repository

phpcheck-server skills/phpcheck-server
phpcheck-url skills/phpcheck-url

How it works

Choose a skill

phpcheck-server

When your agent uses it

Check PHP2Shell patch status with local or server access.

What it loads into context

Frontmatter

20 tokens

Always available to the agent

SKILL.md

1,628 tokens

When the skill is activated

Reference documents

0 tokens

Loaded on request

Token counts are estimates. Scripts run separately; they are not counted as reference context.

The playbook

Identify the serving installation
Check patch status
Verify the running site and report

Files

SKILL.mdcore5,170 bytes
SKILL.mdcore5,170 bytes
SKILL.mdcore5,170 bytes
SKILL.mdcore5,170 bytes

Read SKILL.md


# Check PHP2Shell patch status

Check for fixes covering both CVE-2026-109618 and CVE-2026-109619.
Do not run exploit probes.

## Identify the serving installation

Identify the PHP installation serving the site, including its container if
applicable. The default CLI PHP may differ from PHP-FPM or Apache's PHP module.

Inspect the serving binary or Apache module and its owning package directly.
Determine the OS release and package provider before choosing an advisory.

## Check patch status

View the complete source on GitHub

phpcheck-url

When your agent uses it

Check the advertised PHP version from a URL or hostname.

What it loads into context

Frontmatter

19 tokens

Always available to the agent

SKILL.md

333 tokens

When the skill is activated

Reference documents

0 tokens

Loaded on request

Token counts are estimates. Scripts run separately; they are not counted as reference context.

The playbook

Scripts executed separately

scripts/phpcheck.js

Files

SKILL.mdcore1,277 bytes
SKILL.mdcore1,277 bytes
scripts/phpcheck.jsruns3,983 bytes

Read SKILL.md


From this skill's directory, run:

```sh
node scripts/phpcheck.js "https://example.com" --json
```

Use HTTPS for a bare hostname. The checker reads `Server` and `X-Powered-By`
headers. If the version is hidden, report unknown.

Versions below an upstream fix return `potentially_vulnerable` with exit code 1.
PHP 5.4–5.6, 7.0–7.4, 8.0 and 8.1 also return this warning. A higher patch
number on those branches, such as 8.1.35, does not establish a fix.

Exit code 1 is a version-based warning, not proof that the installed package

View the complete source on GitHub

Skills included

phpcheck-server
phpcheck-url

Repository facts

License: Apache-2.0
Created: Oct 21, 2026
Last pushed: Oct 22, 2026
Forks: 146
Open issues: 2
Project activity: Active

Rank over the last 12 weeks

Now #660 · best #585

#653 on Nov 2
#654 on Nov 3
#655 on Nov 4
#654 on Nov 5
#656 on Nov 6
#660 since Nov 7

11 earlier periods

#945 on Oct 18
#997 on Oct 21
#822 on Oct 22
#638 on Oct 23
#585 on Oct 24
#650 on Oct 25
#638 on Oct 28
#642 on Oct 29
#645 on Oct 30
#647 on Oct 31
#645 on Nov 1

Before you install

Network or broad shell

Automated signals, not a guarantee

Checked Nov 3, 2026

Not fully analyzed: some files were too long, unreadable or missing. This never lowers the level.

Show 4 notes

skills/phpcheck-server/SKILL.md:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
skills/phpcheck-server/SKILL.md:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
skills/phpcheck-server/SKILL.md:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
skills/phpcheck-url/SKILL.md:1 Analysis incomplete: Referenced executable target unavailable; not analyzed

No broad tool permissions
No dangerous shell commands
31 network referencesin 3 files: phpcheck-server/SKILL.md:31 phpcheck-url/scripts/phpcheck.js:28 phpcheck-url/SKILL.md:9
No hidden or obfuscated text
No instruction overrides
1 executable scriptin 1 file: phpcheck-url/scripts/phpcheck.js:1
No access to secrets
No requests to vote in Hot

Show all 32 signals by file

`skills/phpcheck-server/SKILL.md`

Network accessline 31

Use `dpkg-query` to read the full installed package version and `dpkg --compare-versions` for comparisons. Match the Debian release to its records for [CVE-2026-109618](https://security-tracker.debian.org/tracker/CVE-2026-109618)

Network accessline 32

`dpkg --compare-versions` for comparisons. Match the Debian release to its records for [CVE-2026-109618](https://security-tracker.debian.org/tracker/CVE-2026-109618) and [CVE-2026-109619](https://security-tracker.debian.org/tracker/CVE-2026

Network accessline 33

records for [CVE-2026-109618](https://security-tracker.debian.org/tracker/CVE-2026-109618)

Network accessline 34

and [CVE-2026-109619](https://security-tracker.debian.org/tracker/CVE-2026-109619).

Network accessline 36

| Debian release and PHP package | Fixed version | Advisory | | --- | --- | --- | | 12 (bookworm), `php8.2` | `8.2.35-1~deb12u1` | [DLA-4848-1](https://security-tracker.debian.org/tracker/DLA-4848-1) |

Network accessline 37

| --- | --- | --- | | 12 (bookworm), `php8.2` | `8.2.35-1~deb12u1` | [DLA-4848-1](https://security-tracker.debian.org/tracker/DLA-4848-1) | | 13 (trixie), `php8.4` | `8.4.27-1~deb13u1` | [DSA-6574-1](https://security-tracker.debian.org/trac

Network accessline 38

| 12 (bookworm), `php8.2` | `8.2.35-1~deb12u1` | [DLA-4848-1](https://security-tracker.debian.org/tracker/DLA-4848-1) |

Network accessline 39

| 13 (trixie), `php8.4` | `8.4.27-1~deb13u1` | [DSA-6574-1](https://security-tracker.debian.org/tracker/DSA-6574-1) |

Network accessline 50

| Ubuntu release and PHP package | Fixed version | Advisory | | --- | --- | --- | | 26.10, `php8.5` | `8.5.9-0ubuntu2.1` | [USN-8948-1](https://ubuntu.com/security/notices/USN-8948-1) |

Network accessline 51

| --- | --- | --- | | 26.10, `php8.5` | `8.5.9-0ubuntu2.1` | [USN-8948-1](https://ubuntu.com/security/notices/USN-8948-1) | | 26.04 LTS, `php8.5` | `8.5.4-0ubuntu1.5` | [USN-8948-1](https://ubuntu.com/security/notices/USN-8948-1) |

Network accessline 52

| 26.10, `php8.5` | `8.5.9-0ubuntu2.1` | [USN-8948-1](https://ubuntu.com/security/notices/USN-8948-1) |

Network accessline 53

| 26.04 LTS, `php8.5` | `8.5.4-0ubuntu1.5` | [USN-8948-1](https://ubuntu.com/security/notices/USN-8948-1) |

Network accessline 54

| 24.04 LTS, `php8.3` | `8.3.6-0ubuntu0.24.04.13` | [USN-8948-1](https://ubuntu.com/security/notices/USN-8948-1) |

Network accessline 55

| 22.04 LTS, `php8.1` | `8.1.2-1ubuntu2.28` | [USN-8948-1](https://ubuntu.com/security/notices/USN-8948-1) |

Network accessline 56

| 20.04 LTS, `php7.4` (Ubuntu Pro) | `7.4.3-4ubuntu2.29+esm5` | [USN-8948-2](https://ubuntu.com/security/notices/USN-8948-2) |

Network accessline 57

| 18.04 LTS, `php7.2` (Ubuntu Pro) | `7.2.24-0ubuntu0.18.04.17+esm14` | [USN-8948-2](https://ubuntu.com/security/notices/USN-8948-2) |

Network accessline 58

| 16.04 LTS, `php7.0` (Ubuntu Pro + Legacy Support) | `7.0.33-0ubuntu0.16.04.16+esm22` | [USN-8948-2](https://ubuntu.com/security/notices/USN-8948-2) |

Network accessline 59

| 14.04 LTS, `php5` (Ubuntu Pro + Legacy Support) | `5.5.9+dfsg-1ubuntu4.29+esm18` | [USN-8948-2](https://ubuntu.com/security/notices/USN-8948-2) |

Network accessline 77

| RHEL release and PHP stream | Fixed version-release | Advisory | | --- | --- | --- | | RHEL 8.10, PHP 7.4 | `7.4.33-8.module+el8.10.0+25117+30337cca` | [RHSA-2026:87080](https://access.redhat.com/errata/RHSA-2026:87080) |

Network accessline 78

| --- | --- | --- | | RHEL 8.10, PHP 7.4 | `7.4.33-8.module+el8.10.0+25117+30337cca` | [RHSA-2026:87080](https://access.redhat.com/errata/RHSA-2026:87080) | | RHEL 9.8, PHP 8.0 | `8.0.30-8.el9_8.1` | [RHSA-2026:87151](https://access.redhat.

Network accessline 79

| RHEL 8.10, PHP 7.4 | `7.4.33-8.module+el8.10.0+25117+30337cca` | [RHSA-2026:87080](https://access.redhat.com/errata/RHSA-2026:87080) |

Network accessline 80

| RHEL 9.8, PHP 8.0 | `8.0.30-8.el9_8.1` | [RHSA-2026:87151](https://access.redhat.com/errata/RHSA-2026:87151) |

Network accessline 82

Use RPM version ordering, including the epoch, within the matching release and stream. For other RHEL streams, consult Red Hat's records for [CVE-2026-109618](https://access.redhat.com/security/cve/CVE-2026-109618) and

Network accessline 83

and stream. For other RHEL streams, consult Red Hat's records for [CVE-2026-109618](https://access.redhat.com/security/cve/CVE-2026-109618) and [CVE-2026-109619](https://access.redhat.com/security/cve/CVE-2026-109619).

Network accessline 84

[CVE-2026-109618](https://access.redhat.com/security/cve/CVE-2026-109618) and

Network accessline 85

[CVE-2026-109619](https://access.redhat.com/security/cve/CVE-2026-109619).

Network accessline 92

The [upstream fixed releases](https://www.php.net/archive/2026.php#2026-10-21-5)

`skills/phpcheck-url/SKILL.md`

Network accessline 9

node scripts/phpcheck.js "https://example.com" --json

`skills/phpcheck-url/scripts/phpcheck.js`

Executable scriptline 1
```
#!/usr/bin/env node
```

Network accessline 28

const headers = []   for (const method of ['HEAD', 'GET']) {     const response = await fetch(url, {

Network accessline 29

for (const method of ['HEAD', 'GET']) {     const response = await fetch(url, {       method, redirect: 'manual', signal: AbortSignal.timeout(Math.ceil(timeout * 1000)),

Network accessline 30
```
const response = await fetch(url, {
```

How the signals fit together

Facts from a static read of the files at the pinned commit. They describe what the code does, not why.

Some files could not be read; the facts below still hold.

No combined signals at this commit.

Works with

Agent compatibility, from the files in this repository
Agent	Status	Evidence	Install to
Claude Code	Compatible	Standard SKILL.md skills/phpcheck-server/SKILL.md	`.claude/skills/<skill-name>/`
Codex	Compatible	Standard SKILL.md skills/phpcheck-server/SKILL.md	`.agents/skills/<skill-name>/`
Cursor	Compatible	Standard SKILL.md skills/phpcheck-server/SKILL.md	`.cursor/skills/<skill-name>/`
Gemini CLI	Compatible	Standard SKILL.md skills/phpcheck-server/SKILL.md	`.gemini/skills/<skill-name>/`
GitHub Copilot	Compatible	Standard SKILL.md skills/phpcheck-server/SKILL.md	`.github/skills/<skill-name>/`
OpenCode	Compatible	Standard SKILL.md skills/phpcheck-server/SKILL.md	`.opencode/skills/<skill-name>/`

Native The repository ships a manifest, folder or frontmatter field for this agent.
Compatible A standard SKILL.md that this agent can read.
Unknown No evidence either way.

Derived automatically from paths, manifests and frontmatter. Not tested on each agent.

Explore alternatives and comparisons

Add this badge to your README

It updates every night and links to this page.

[![openai/php2shell-checker on hotskills](https://hotskills.dev/badge/openai-php2shell-checker.svg)](https://hotskills.dev/skill/openai-php2shell-checker/)

openai/php2shell-checker

History

skills/phpcheck-server/SKILL.md

skills/phpcheck-url/SKILL.md

Share this page

Heat

Stars over time

Individual skills in this repository

How it works

phpcheck-server

Frontmatter

SKILL.md

Reference documents

The playbook

Files

phpcheck-url

Frontmatter

SKILL.md

Reference documents

The playbook

Scripts executed separately

Files

Skills included

Repository facts

Rank over the last 12 weeks

Before you install

skills/phpcheck-server/SKILL.md

skills/phpcheck-url/SKILL.md

skills/phpcheck-url/scripts/phpcheck.js

How the signals fit together

Works with

You might also use

mattpocock/skills

obra/superpowers

NousResearch/hermes-agent

multica-ai/andrej-karpathy-skills

anthropics/skills

DietrichGebert/ponytail

Explore alternatives and comparisons

Add this badge to your README

`skills/phpcheck-server/SKILL.md`

`skills/phpcheck-url/SKILL.md`

`skills/phpcheck-server/SKILL.md`

`skills/phpcheck-url/SKILL.md`

`skills/phpcheck-url/scripts/phpcheck.js`