Contact
Contact the editors about PHP2Shell corrections
This mailbox belongs to the independent site. Vulnerability reports for PHP itself go to the PHP project, whose process is linked from php.net. Reports for your own incident go to your host, your national CSIRT, or an incident-response retainer — not here.
Last updated
A correction we can use
- The page URL and the sentence you think is wrong.
- A link to a primary source: the PHP advisory, a government alert, or a vendor post with a date.
- Whether the issue is in the English page, the Simplified Chinese page, or both.
What we will not take
Please do not send proof-of-concept exploits, payloads, or a request to publish attack steps. The editorial policy refuses those. Marketing pitches for unrelated products will be ignored. We also cannot confirm whether your server has been compromised.
Sources
Outbound links leave this site. We do not host exploit code.
- News archive 2026: security advisory, 21 October 2026 — PHP project (php.net)