{"type":"analysis","id":"analysis:the-php2shell-fix-is-a-version-number-and-the-tools-people-will-use-to-check","slug":"the-php2shell-fix-is-a-version-number-and-the-tools-people-will-use-to-check","title":"The php2shell fix is a version number, and the tools people will use to check for it can't see it","description":"The fix for php2shell is a runtime upgrade. The tools people will reach for first, an edge WAF and a header-based checker, both have gaps, and the most careful operators fall into them most often.","published_at":"2026-10-23T10:00:00.000Z","updated_at":"2026-10-23T10:00:00.000Z","record_date":"2026-10-23","topics":["tools"],"source_urls":["https://vercel.com/kb/bulletin/php2shell-security-bulletin","https://simonwillison.net/2026/Oct/21/php-security-release","https://github.com/openai/php2shell-checker","https://vercel.com/blog/ai-gateway-production-index-october-2026","https://www.wiz.io/blog/php2shell-php-rce"],"language":"en","routes":{"html":"https://newruntime.com/analysis/the-php2shell-fix-is-a-version-number-and-the-tools-people-will-use-to-check/","markdown":"https://newruntime.com/analysis/the-php2shell-fix-is-a-version-number-and-the-tools-people-will-use-to-check.md","json":"https://newruntime.com/analysis/the-php2shell-fix-is-a-version-number-and-the-tools-people-will-use-to-check.json"},"author":{"role":"author","name":"Andrey Reshetnikov","profile":"https://newruntime.com/owner-profile.md","profile_json":"https://newruntime.com/owner-profile.json","same_as":["https://www.linkedin.com/in/reshetnikov1/","https://t.me/lapetuse"]},"editorial_provenance":{"desk":"authorial","target_ref":"story_cluster:vercel-php2shell-security-advisory-82f76ac41fb7","authorial_article_id":"16ac2674-2e01-4820-bc7d-8d2823f3aa18"},"next_reads":[{"type":"topic","path":"/topics/tools/","url":"https://newruntime.com/topics/tools/","title":"Tools","reason":"Explore the tools topic hub.","media_type":"text/html","markdown_url":"https://newruntime.com/topics/tools.md","json_url":"https://newruntime.com/topics/tools.json"},{"type":"collection","path":"/analysis/","url":"https://newruntime.com/analysis/","title":"Analysis","reason":"Open the latest authorial analysis.","media_type":"text/html","json_url":"https://newruntime.com/analysis.json"},{"type":"collection","path":"/source-ledger.json","url":"https://newruntime.com/source-ledger.json","title":"Source Ledger","reason":"Inspect the public source evidence graph.","media_type":"application/json"}]}