Old website? It may be wide open to a new attack.
On 21 October, a serious security hole was found in PHP, the software most websites run on, including WordPress sites and many online stores. You may have seen it in the news as “PHP2Shell.” Newer websites can be updated. Older ones can't get the official fix.
We'll check yours for free, and fix it for one flat price.
Your website runs PHP 7.2. It stopped getting security fixes in November 2020, and it can't get the official fix for the new flaw.
What we recommend: move your site to a supported version. We'll do it on a copy first and test everything.
Cost to fix: one flat price, quoted here. Nothing happens until you say yes.
Does this sound like you?
Tick anything that's true. It takes ten seconds.
What could happen if it isn't fixed
Security researchers have already seen attackers trying this flaw on real websites. They don't need your password.
Someone takes over your site
They can change your pages, add spam or scam pages, or send your visitors somewhere else.
Private details leak
Passwords and other details your site handles can be read by the attacker.
Google warns visitors away
Hacked sites can get a warning in search results that scares customers off.
Your host takes it offline
Web hosts often suspend hacked sites until they've been cleaned up.
Why didn't my website just update itself?
Your website sits on layers. The parts you know about, like WordPress or your store, get updates. Underneath is PHP, the engine that runs everything.
Updating WordPress doesn't update PHP. And older versions of PHP don't get fixes at all anymore. So there's no button for you to press. Someone has to move your site to a newer version and make sure nothing breaks.
That's what we do. It isn't your fault, and you don't need to understand it.
How it works
- 1
Send us your website address
That's all we need to start. No passwords, no logins.
- 2
Get a plain-English answer
Safe, at risk, or needs a closer look. If it needs fixing, you get one flat price.
- 3
Say yes, and we fix it
We do the work on a copy, check everything still works, then switch over and send you proof.
Our promises
- We copy your whole website before we touch anything
- Nothing changes until you say yes
- One flat price, agreed before we start
- We never ask for passwords by email
Simple pricing
No hourly bills. You know the price before we start.
We tell you if your website is safe, at risk, or needs a closer look.
Check my websitePer website. We move it to a safe version, test it, and send you proof it's done.
Start with a free checkWe keep watch and handle the next one, so you never have to think about this again.
Ask about the planQuestions people ask us
Is this the “PHP2Shell” thing from the news?
Yes. PHP2Shell is the nickname for two serious flaws found in PHP, the software that runs most websites behind the scenes. They let a stranger take control of a website without a password. A fix came out on 21 October 2026, but only for newer versions. Many older websites can’t simply install it, which is where we come in.
Do I need to understand any of this?
No. Send us your website address and we'll tell you in plain English whether you're safe, and what it costs if you're not.
My website works fine. Why fix it?
This flaw doesn't break your website. Attackers use it quietly, and a site can look completely normal while someone else is in control of it.
Isn't this my web host's job?
Your host looks after the computer your site lives on. Keeping your site's own software up to date is usually left to you, and older sites often need changes before they can move to a newer version.
What if the fix breaks my website?
We copy your whole site first and do the work on the copy. You check it before we switch over, and we keep the old version so we can switch back if anything's wrong.
How do I know this isn't a scam?
Fair question. The check needs only your website address, never a password, and you pay nothing unless you agree to a fix. You can read about the flaw yourself in The Hacker News or Help Net Security.
Find out if your website is safe.
Free, no passwords, and an answer you can understand.
Rather talk to a person? Book a free 15-minute call
Or email hello@infraredtiming.com · call