PHP Checker vs. phpinfo() vs. php -v

Use a URL checker for a website’s advertised version, phpinfo() for the PHP runtime serving a page, and php -v for the command-line runtime. These methods can report different versions on the same server.

Updated October 23, 2026 · Written by PHP Checker · Source references included below

Compare the 3 methods

Method	Access needed	What it reports	Main limitation
PHP Checker URL mode	A public URL	The PHP version in public HTTP headers	Hidden, modified, or proxy headers may prevent a reliable result
phpinfo()	Permission to run PHP on the website	The web runtime and detailed PHP configuration	Can disclose configuration details if exposed publicly
php -v	Terminal access	The PHP executable used by your command line	May differ from your website’s PHP runtime
Hosting panel / WordPress Site Health	Account or admin access	The runtime assigned to your website	Requires access and may omit package backport details

When should I use the free URL checker?

Use it for a quick check of the public version advertised by a website. No installation or account is needed. The checker reads two headers and gives a version-based PHP2Shell patch warning; it does not inspect the application or confirm the installed build.

When is phpinfo() useful?

The PHP phpinfo() function shows detailed runtime information, including the PHP version, extensions, and configuration settings. It is useful when you are authorized to diagnose the PHP runtime serving a particular web request.

Protect any diagnostic page from public access and remove it when finished. For a version-only check, phpversion() returns the PHP version with less output, but it still needs to run within the relevant web environment.

When should I run php -v?

Use php -v when you need the PHP version used by command-line scripts, Composer, or scheduled jobs. It does not establish which version serves requests through PHP-FPM or an Apache module.

php -v

Which method proves PHP2Shell is patched?

No version-only method proves that by itself. A distribution may backport a fix while keeping an older version string, and HTTP headers can be customized. Confirm the installed package build and advisory status with your hosting provider or operating-system vendor.

Is PHP Checker an alternative to a vulnerability scanner?

No. It is a free, focused version checker adapted from OpenAI’s php2shell-checker. It sends no exploit probes and does not audit WordPress, extensions, application code, or server configuration.

Sources: PHP phpinfo() documentation, PHP phpversion() documentation, PHP CLI options.

Check your PHP version