If you're running earlier versions, or you're on a host that maintains PHP for you, you're unprotected... for a long time.
This is a proxy I have quickly put together, to use on our own legacy environments. It's free and open source (MIT license).
Recommendations:
1. Run it under a Linux user with no permissions to access any files. It's just a pure proxy -- transforming input into output on a network port.
2. Modify your server files (nginx, apache, etc.) to use the proxy in proxy_pass etc. before it hits your PHP. Boom, your apps should be protected.
3. As with any git repo, run it through an LLM. Do not take my word for anything... if you find any bugs, please submit a pull request.
Hope this helps the community that hosts websites with PHP! (aka 80% of the web)
Or, I just saw that a whole domain was registered to explain it: https://www.php2shell.com/
EGreg•1h ago
If you're running earlier versions, or you're on a host that maintains PHP for you, you're unprotected... for a long time.
This is a proxy I have quickly put together, to use on our own legacy environments. It's free and open source (MIT license).
Recommendations:
1. Run it under a Linux user with no permissions to access any files. It's just a pure proxy -- transforming input into output on a network port.
2. Modify your server files (nginx, apache, etc.) to use the proxy in proxy_pass etc. before it hits your PHP. Boom, your apps should be protected.
3. As with any git repo, run it through an LLM. Do not take my word for anything... if you find any bugs, please submit a pull request.
Hope this helps the community that hosts websites with PHP! (aka 80% of the web)