PHP2Shell statement record · Host

Platform.sh and PHP2Shell

Status in the company's own words: patched. Statement dated 22 October 2026.

This index reports published statements and AI answers on stated dates. It is not a security assessment. For patching, follow PHP's advisory and your host.

Last checked . Last refreshed .

Submit a correction or your statement Get the badge All statements

The record

Company
Platform.sh
Domain
platform.sh
Group
Host
Index category
not an Index vendor
Status
patched
Statement found
yes
Statement
https://upsun.com/blog/php2shell-upsun-response/
Statement date
Fixed version named
no
Worker restart stated
yes
End of life plan stated
yes
Source type
official page
Places checked
Last checked

The statement

Read the statement on upsun.com, dated . Source type: official page.

Notes

Platform.sh now operates as Upsun (platform.sh pages redirect to upsun.com; Upsun press release of September 23, 2025 says Platform.sh evolved into Upsun). At 23:35, the status page confirmed every Upsun Cloud region was updated. (21 October; last patches in place at 04:12 on 22 October) and we patched and restarted affected sites for them. quoted from https://upsun.com/blog/php2shell-upsun-response/ (title: How Upsun handled PHP2Shell: protection in place 22 hours before the patch). Edge WAF rules were blocking attacks in every region from 15:50 on 20 October; customers did not need to act; older unsupported PHP versions were patched the same evening and versions too old to fix are handled by contacting affected customers. No fixed version numbers named. Earlier post: https://upsun.com/blog/php-critical-security-release-oct2026/ (October 21, 2026, not read).

Change log

What the five engines said

AI answers not yet measured

Submit a correction or your statement

Submit a correction or your statement. We list a statement only once we have opened it on your own domain or verified official account. Disputes follow the dispute policy. Or email the statement link to index@broadcastwell.com.

Badge

The badge for Platform.sh reads PHP2Shell statement listed, Verified 23 October 2026, Broadcastwell, and links to this record. Badge and embed code · Badge terms.

Platform.sh's customers can ask us for the PHP2Shell Record Check: we capture what ChatGPT, Claude, Perplexity, Google AI Overviews and Google AI Mode say about Platform.sh and PHP2Shell, trace every wrong or missing statement to its source and deliver a statement page in the format the engines quote. Record Check $490 once.

About this page

This index reports published statements and AI answers on stated dates. It is not a security assessment. For patching, follow PHP's advisory and your host.

Last refreshed .

PHP2Shell Statement Index · AI Answer Watch · Download the data · Submit a statement · Dispute policy