Browse categories
Explore
Fiverr Pro
English
$
USD
I will patch your PHP site against the critical php2shell flaw
Afthab Ahmed
About this gig
Your PHP website is at risk right now, even if your CMS and plugins are fully updated.
On 21 October 2026 the PHP team released emergency fixes for two critical flaws in PHP itself: CVE-2026-109618 and CVE-2026-109619, called PHP2Shell. Both are rated 9.2 out of 10. An attacker with no login can run code on a vulnerable server and read server memory that may contain passwords and API keys. Attacks were already reported when the patch shipped. Only updating PHP fixes this.
I am a senior PHP developer with 20+ years of experience, Acquia Certified for Drupal 11, and former Drupal technical lead for several federal public-facing websites. I patch WordPress, Drupal, Magento, and custom PHP sites.
What you get: a version and compatibility check first, a full backup, the update to a patched PHP version (8.2.35, 8.3.36, 8.4.27, or 8.5.12), service restarts, testing of your key pages, and a short written report.
On PHP 8.1 or older there is no official patched release. Message me first and I will tell you honestly if a vendor backport covers you or a full upgrade is needed. Message me your site URL today for a same-day vulnerability check.
Respect third-party rights
Please be aware that it is against Fiverr's policies for sellers to include themes, templates, or any other elements that infringe third-party rights or applicable laws in the delivered work. Read more about in our Guide to Responsible Digital Creation.
Get to know Afthab Ahmed
Afthab Ahmed
Senior PHP Developer: Drupal, WordPress, Magento Specialist
- FromUnited States
- Member sinceOct 2026
- Avg. response time3 hours
Languages
English, Tamil, Sinhala
I'm a senior full-stack PHP developer with 15+ years across Drupal, WordPress, Magento, osCommerce, and Bolt CMS. Former Drupal technical lead on a large US federal website. Acquia Certified, Drupal 11.
I rescue broken sites (errors, white screens, broken checkouts, hacks, slow pages), handle migrations and upgrades (Drupal 7/9/10 to 10/11, PHP site migrations), and build clean custom solutions without bloat.
I diagnose before changing anything, back up first, and keep you updated. If I can't fix it, you don't pay.
Other Website Maintenance Services I Offer
FAQ
How do I know if I am affected?
If your site runs PHP, assume yes until the version is checked. Any PHP below 8.2.35, 8.3.36, 8.4.27, or 8.5.12 on its branch is vulnerable.
Will updating WordPress or Drupal fix this?
No. The flaw is in PHP itself, underneath the CMS. Only the PHP update fixes it.
I am on PHP 8.1 or older, can you help?
Yes. There is no official patched release for those branches, so we use a vendor backport where one exists, or plan a safe upgrade together.
Will the update break my site?
It can if plugins, modules, or custom code are not ready. That is why I check compatibility first, back up, and test after the update.
What access do you need?
For the audit, just your site URL. For patching, hosting panel or SSH access, plus a maintenance window.
Can you visit on-site?
Yes, I can visit on-site if needed, with travel expenses covered by the client.
