When maintaining a PHP website, a simple question can lead to several different investigations:

Which PHP version does the website advertise? Which version actually serves requests? Has the hosting provider backported a fix? Are temporary controls deployed correctly?

I built PHP2Shell Emergency Response Hub to help organize those steps. It combines a passive HTTP header inspector, a manual PHP version evaluator, and configuration guidance for several deployment environments.

The most important design decision was defining what each result could establish. Public headers provide useful evidence, but they cannot certify that a website is patched.

The application uses Next.js App Router, TypeScript, Tailwind CSS, and lucide-react . Here are the implementation choices and limitations behind it.

One inspection engine, two runtime adapters

The advisory pages are statically exported to Cloudflare Pages.…