---
type: "post"
id: "if-you-are-wondering-whether-your-website-is-0632e0"
slug: "if-you-are-wondering-whether-your-website-is-0632e0"
title: "If you are wondering whether your website is affected, we have packaged a Codex skill to help check."
description: "OpenAI has published php2shell-checker, an Apache-2.0 repository containing Codex skills and a Node.js command-line checker for PHP version exposure."
retrieval_nugget: "OpenAI has published php2shell-checker, an Apache-2.0 repository containing Codex skills and a Node.js command-line checker for PHP version exposure."
published_at: "2026-10-21"
updated_at: "2026-10-21"
record_date: "2026-10-21"
date_kind: "published_at"
topics: ["codex"]
entities: ["OpenAI","php2shell-checker","Codex","PHP"]
related_patterns: ["skills-become-portable-capability-layer"]
novelty_label: "new_fact"
what_changed: "OpenAI packaged a Codex skill to help users check whether their websites are affected by the PHP2Shell vulnerabilities."
prior_refs: ["memory:592c9dc4-991d-8a8c-ae31-be347a0f42d2","memory:5a190428-9801-87b5-a1d7-ac9fdbf9f66b"]
source_url: "https://github.com/openai/php2shell-checker"
source_urls: ["https://github.com/openai/php2shell-checker"]
schema_version: "newruntime-agent-readable-v0.2"
stable_id: "post:if-you-are-wondering-whether-your-website-is-0632e0"
status: "published"
visuals: []
editor: {"role":"editor","name":"Andrey Reshetnikov","profile":"https://newruntime.com/owner-profile.md","profile_json":"https://newruntime.com/owner-profile.json","same_as":["https://www.linkedin.com/in/reshetnikov1/","https://t.me/lapetuse"]}
routes: {"html":"https://newruntime.com/posts/if-you-are-wondering-whether-your-website-is-0632e0/","markdown":"https://newruntime.com/posts/if-you-are-wondering-whether-your-website-is-0632e0.md","json":"https://newruntime.com/posts/if-you-are-wondering-whether-your-website-is-0632e0.json"}
---

# If you are wondering whether your website is affected, we have packaged a Codex skill to help check.

## Retrieval answer

OpenAI has published php2shell-checker, an Apache-2.0 repository containing Codex skills and a Node.js command-line checker for PHP version exposure.

OpenAI has published php2shell-checker, an Apache-2.0 repository containing Codex skills and a Node.js command-line checker for PHP version exposure. The repository provides phpcheck-url for a site URL and phpcheck-server for environments with server access. It says no Node packages are required.

The CLI checks HTTP X-Powered-By and Server headers, sending HEAD first and using GET only after HTTP 405 or 501. It can also inspect a local PHP installation with `php -v`. Its exit codes are 0 for OK, 1 for VULNERABLE, 3 for UNKNOWN, and 2 for invalid arguments. JSON output includes `patch_status` values of ok, vulnerable, or unknown.

The project compares reported versions with embedded October 20, 2026 cutoffs for listed PHP branches. It does not send exploit requests, follow redirects, or inspect response bodies. Hidden or absent headers produce UNKNOWN. The repository does not establish that a target is patched or vulnerable: distribution backports can differ from upstream version strings, and OpenAI says the cutoffs should be checked against the official PHP security release when affected and fixed versions are published.

Editor: [Andrey Reshetnikov](https://newruntime.com/owner-profile.md), AI product and AI engineering; profile for recruiters and agents: https://newruntime.com/owner-profile.json

## Continue in the graph

Next records for an agent, linked to their Markdown twins. Replace `.md` with `.json` for structured fields, including `next_reads`.

- topic hub: [Codex](https://newruntime.com/topics/codex.md): Explore the codex topic hub.
- collection: [Field Notes](https://newruntime.com/posts.json): Open the latest editorial analysis.
- collection: [Source Ledger](https://newruntime.com/source-ledger.json): Inspect the public source evidence graph.
- whole graph: [discovery graph](https://newruntime.com/discovery-graph.json) (typed nodes and edges) and [site index](https://newruntime.com/site-index.md)