Get your PHP website patched
A PHP vulnerability notice does not tell you exactly what your website needs. I help establish which version and application are running, who can perform the update and how to check that the site still works afterwards.
Discuss your PHP updateDoes this fit your situation?
For businesses with a PHP website or application that have received a security notice, use an older version or do not know whether their hosting has been updated. Send your website address and a short description; do not share passwords through the contact form.
What we can work on
- A review of the PHP version, application and hosting options within the available access.
- Coordination of patches with your hosting provider and relevant software supplier.
- An update plan covering compatibility, backups and rollback.
- Post-deployment checks of the active version and agreed functions, such as forms, login or checkout.
How we approach the work
- Establish what is affected
- We collect the version and environment information needed to assess the notice. Updating PHP on a server and updating the application are not automatically the same task.
- Prepare a controlled update
- We discuss dependencies, extensions and important functions. Where the environment requires it, we test outside production first. Execution and responsibilities are agreed in advance.
- Check the actual deployment
- After the update, we check what is actually running and walk through the agreed user journeys. The process does not stop at assuming a supplier’s patch announcement is enough.
What to know upfront
Not every older application will run immediately on a newer PHP version. Application changes or a migration may be necessary. If compromise is suspected, patching alone is insufficient and specialist incident response may be needed.
Frequently asked questions
My host says PHP is patched. Is that enough?
That may cover the server update, but not necessarily the application, plug-ins or other dependencies. We agree which version and function checks your website needs.
Can you quote a fixed price upfront?
A limited initial review is needed first. Access, software and compatibility determine the work. You receive a proposal for the agreed review and implementation before we start.
Will my website need to go offline?
Not always. It depends on the hosting and application. We discuss the maintenance window, possible interruption and rollback in advance, without promising uninterrupted availability.