Skip to main content
skillsmp

Menú

phpcheck-url

Check the advertised PHP version from a URL or hostname.

Ir a la instalaciónRevisar archivos

Datos de origen

Repositorio
openai/php2shell-checker
Última actividad en el origen
22 de octubre de 2026 a las 22:55
Idioma detectado de SKILL.md
inglés
Estrellas
836
Forks
83

phpcheck-url: Check PHP version from URL

Check the advertised PHP version and vulnerability status from a website URL or hostname using HTTP headers.

Uses

Provide a website URL or hostname to check its PHP version.

Prerequisites

Requires Node.js.

How to use

  1. Navigate to the skill directory.
  2. Run the PHP check script with the target URL.

Limitations

Cannot verify backported security fixes in installed packages.

Sources

Opciones de instalación

De forma predeterminada está seleccionado el prompt que primero revisa el origen. Puedes cambiar a un comando directo o descargar una copia local.

Revisa los archivos de origen

Lee SKILL.md y los archivos complementarios que muestra SkillsMP antes de decidir si quieres instalarlo.

Explorador de archivos
2 archivos

Mostrando SKILL.md

SKILL.md
Instrucciones de origen · Vista previa de solo lectura
name
phpcheck-url
description
Check the advertised PHP version from a URL or hostname.
From this skill's directory, run: ```sh node scripts/phpcheck.js "https://example.com" --json ``` Use HTTPS for a bare hostname. The checker reads `Server` and `X-Powered-By` headers. If the version is hidden, report unknown. Versions below an upstream fix return `potentially_vulnerable` with exit code 1. PHP 5.4–5.6, 7.0–7.4, 8.0 and 8.1 also return this warning. A higher patch number on those branches, such as 8.1.35, does not establish a fix. Exit code 1 is a version-based warning, not proof that the installed package is unpatched. HTTP headers cannot tell whether the version contains a backported fix. Describe the result as potentially vulnerable, never confirmed vulnerable. An `ok` result with exit code 0 means only that the advertised stable version meets an upstream fixed release: 8.2.35, 8.3.36, 8.4.27 or 8.5.12. The installed build is not verified. Missing or unrecognized versions, prereleases and failed checks return `unknown` with exit code 3. Headers can be changed. A server-side check of the package serving the site is stronger evidence. Do not run exploit probes. Exit codes 1 and 3 are check results. Invalid arguments exit with code 2.
Ver en GitHub
Volver a la búsquedaVolver a la instalación