Fixed-price fix

Update PHP and close the PHP2Shell hole

PHP patched or upgraded to a supported version, the site working on it, and a check for signs the hole was used.

What "fixed" means

PHP runs a version with the PHP2Shell fix: 8.2.35, 8.3.36, 8.4.27, 8.5.12 or newer, or your host's backported package where that is the only option. The site and its admin load on it. Anything the change broke is updated, replaced or disabled with your OK. We look for signs the hole was used and list what we found. A backup from before the change is kept.

Access we will need

  • Server access (SSH or SFTP)
  • Hosting panel collaborator
  • WordPress admin

You grant it after the hold is placed, with step-by-step instructions for your host. The people who sign in are our own US-based team, bound by our confidentiality, never a contractor or a marketplace, and every sign-in is logged on your job page. We remove our own access when the job closes.

WordPress admin is granted through our FixGuru Access plugin, a temporary administrator that deletes itself, with a backup first and a change log on your site. If you would rather not install a plugin, you can share a temporary login in the encrypted vault instead.

How paying works

  1. Held. Your card is authorized for $149. Nothing is charged.
  2. Fixed. We start within 2 hours of access during service hours and finish within 24 hours.
  3. Approved. You review the report and approve. Only then is the card charged. If it isn't fixed, the hold is released and you pay $0.

Same problem back within 14 days? We fix it again at no charge.

Is this your situation?

Other fixes