Permitted use
Use the tool for websites you own, administer, or have permission to check. Do not use it to harass website operators, bypass access controls, or generate excessive automated requests. Public URL checks use ordinary HEAD requests and a GET fallback only for HTTP 405 or 501.
Results and limitations
A version string is not proof of the actual installed build, patch status, or overall security. Headers may be hidden or changed. Vendors can backport fixes. Unknown results mean the tool could not establish a supported version, not that a website is secure.
The rules reflect the upstream checker and the October 21, 2026 PHP security advisory. The patch thresholds are not a complete vulnerability database, compatibility test, or live latest-release list.
Availability
The service is provided free of charge, as available, without a guarantee of uninterrupted access or accuracy. Fair-use limits apply, and availability depends on the hosting platform’s limits. You are responsible for checking a proposed PHP update against your application’s requirements.
Source and attribution
The project adapts openai/php2shell-checker under Apache-2.0. The original source, modification notices, and license are available in our GitHub repository. This project is independent and is not affiliated with or endorsed by OpenAI or the PHP project.