Blog

Blog

Last updated:

Short, sourced posts on PHP security, PHP2Shell and PHP end-of-life deadlines.

Follow new posts with the Atom feed, or browse by topic.

  1. Five version numbers, one fix: how to read PHP2Shell patch versions

    · 3 min read

    8.4.27, 8.3.6-0ubuntu0.24.04.13, 8.1.2-1ubuntu2.28: all can carry the PHP2Shell fix. How to read PHP version strings, and what to check instead.

  2. How many WordPress sites will be on end-of-life PHP on January 1?

    · 3 min read

    About a third of WordPress sites run PHP that no longer gets security fixes. On January 1, 2027 it's about 58%, unless they upgrade. Method and caveats.

  3. PHP 8.2 end of life in 67 days: a week-by-week plan

    · 3 min read

    PHP 8.2 stops getting security fixes on December 31, 2026. A week-by-week plan from late October: inventory, scans, staging, switch, verify.

  4. Before your holiday code freeze: a PHP2Shell and PHP 8.2 checklist for online stores

    · 4 min read

    Running WooCommerce or Magento? What to check and fix for PHP2Shell and PHP 8.2's end of life before the Black Friday code freeze, and what can wait.