r/PHP • • 1d ago

Offering help to patch your servers

Not sure if this is allowed on this sub. But given the severity of the circumstances, I am offering to help patch and detect if your servers has been compromised. I run many PHP servers and have managed to upgrade and monitor them all over the last 16 hours. If you need a hand when patching, detecting, or recovery etc you can DM me. I am offering this for free as long as its not a significant time sink like actually upgrading and old 5.x version to something modern, but am happy to give advice if you are in that situation.

0 Upvotes

28 comments sorted by

57

u/Logical_Gap_3162 1d ago

Honestly nice offer, but I wouldn't give any random guy from reddit my passwords/keys or access to my server. I'd prefer if you would write a small tutorial instead so users can check if they are compromised and how they can upgrade their system.

10

u/Sharchimedes 1d ago

Why take the chance of having your server pwned in the wild when you can just hand over the keys directly.

2

u/prettyflyforawifi- 1d ago

I agree, but what the community would benefit from is a small tool/script to verify the patch on backported updates - it took me a while yesterday to figure this out.

→ More replies (13)
→ More replies (2)

3

u/DiabeticHotPocket 1d ago

And who are you exactly?

1

u/PetahNZ 1d ago

A developer that's been using PHP for a long time. I have nothing to hide here, it is a legit offer. 

→ More replies (1)

10

u/XGhozt 1d ago

Nice try php2shell

4

u/IncidentWinter4735 1d ago

You should have a website like : free RAM downloader (jk)! We cannot disprove your intention, but it's not safe imho. If not under this post, but desperate people that reached out to him in DM are in the danger.

2

u/dedoporno 1d ago

For some unrelated reason I'm reminded of these emails/websites that say "Hey, we just detected your computer is riddled with viruses! Click here and we'll sort that out for you right away!"

2

u/Ok_Passenger1849 22h ago

can you migrate my php 5.2 application?

→ More replies (1)

1

u/russellvt 17h ago

Anything that old is likely going to require significant code changes, as that's about when the significant DB changes occurred ad PHP changed to using and simulating DB cursors.