SMALL BUSINESS WEBSITES
Clarity first.
The right fix, next.
Help checking and updating the PHP behind your website. Start with your host’s confirmation: if the fix is already installed, there is no update to buy.
- Email support
- Brazil and abroad
- No upfront payment
A SIMPLE PATH
From uncertainty to a clear next step.
- 01
Confirm
Ask your host and send its answer. The initial explanation is free.
- 02
Agree
If a fix is still needed, we confirm eligibility, authorized access, scope and timing.
- 03
Update and validate
Prepare recovery, apply the official fix and run agreed checks. Payment follows validated delivery.
A ONE-OFF UPDATE
One website. An agreed scope.
total for one eligible site outside Brazil
In Brazil: R$199 total.
For a shop, customer accounts, orders or bookings on a PHP website you are authorized to manage. Eligibility depends on the hosting environment and a supported PHP version.
Ask for free guidance ↗What is included
- Confirm the need and agree the scope before work.
- Back up files and the database, with a restoration plan.
- Apply the official PHP fix to the eligible environment.
- Check agreed website functions and confirm delivery.
When it is a different job
Legacy migrations, intrusion cleanup and application-code repairs are outside this price. If one is needed, we stop to clarify the scope before accepting the work.
Already patched by your host? No update to purchase.
WHY CHECK NOW
A flaw in the server software.
The flaws disclosed on 21 October 2026 affect PHP, used by many websites including WordPress and Drupal. On an affected, unpatched server, they could allow control without a password, information theft and service disruption.
The NSA recommends taking affected systems offline if immediate updating is impossible. This is not advice to switch every website off: confirm your situation with your host.
23 October update: PHP published additional guidance for a rare configuration. Ask your host to check whether it applies to your site.
Sources checked on 23 October 2026.
BEFORE YOU HIRE
Straightforward answers.
Does updating WordPress fix this?
The WordPress version and the PHP version are different. The fix must be installed in the server’s PHP or in a corrected vendor package. Your host can confirm this.
Have you checked whether my website is vulnerable?
No. A public website or a platform name does not establish its patch status. Start with the host’s confirmation; we do not test your website’s security as part of that first step.
Do I need to send passwords?
Do not send passwords, customer data, backups or keys in the first email. If work is feasible, we agree temporary, limited access through an appropriate channel before the intervention.
When do I pay?
After validated delivery, against the scope and checks agreed before work. The payment method is also agreed before accepting the job.
What if I use a hosted platform?
For third-party managed shops or booking platforms, the provider may be responsible for the update. We can explain its response and only propose work when there is an eligible task to do.
START WITH THE HOST’S ANSWER
Your website, and what your host said.
Email the public website address and your host’s answer, if you have it. No passwords or customer data. The first explanation is free.