From the workshop: notes, patterns and lessons from projects building custom business software. No marketing, just what we actually learned. Written in English so everyone can read along.
Patching PHP2Shell (CVE-2026-109618 and CVE-2026-109619) closes the hole, but it does not tell you whether someone got in before you patched. Here is a read-only bash script that checks your PHP builds and looks for the few traces an exploitation attempt leaves behind.
