PHP security, patching and server migration
PHP security issue? We’ll help fix it and test your website
We’ll establish what your server needs. Before making changes, we agree the cost, recovery plan and checks for key functions, such as forms, orders and sign-in
The initial discussion by message is free. Technical diagnosis and implementation are scoped and paid for separately.
Communicate in Russian or English. No call required.
Does this sound familiar?
A warning from your hosting provider
“My hosting provider warned me about PHP vulnerabilities. Is our server affected?”
An outdated PHP version
“Our PHP version is old. We need a practical way to update it.”
A website your business relies on
“We need an update, but can’t afford to break orders, forms or customer logins.”
PHP runs part of your website on the server. Pages loading and orders coming in do not establish that it is free of vulnerabilities. The first technical question is whether your setup is affected and which fixes apply
How we help
Diagnosis, patching, migration and ongoing maintenance can be separate stages.
Understand the issue
We clarify the issue and available information by message. If technical diagnosis is needed, we separately agree its scope, price and written findings.
Agree the work
We confirm the scope, price, schedule, payment terms and acceptance criteria in writing. If access is needed, we provide instructions and agree permissions and how access will be shared.
Patch or plan a migration
We apply suitable security fixes to a supported setup. If a new server environment is needed, we agree a separate migration project.
Verify the fixes and test the website
We verify that the agreed fixes are applied and separately test the selected website functions. You receive a written record of changes, both checks and remaining limitations. Acceptance can also be handled by message.
After the agreed work, you have a record of what changed, how the fixes were verified, which functions were tested and what remains to be addressed
Your website keeps your business moving
WORKCOWORK Digital provides services through WORKCOWORK SYSTEM, a business registered in Israel. The team is represented by Alexander Gorsky
A defined scope
We identify which components will change and where your hosting provider or team needs to be involved.
A recovery plan
Before making changes, we check that the backup is usable and agree how to recover if something goes wrong.
Checks that matter
We agree key actions to test, such as sending a form, placing an order or signing in.
If downtime is needed, we discuss it in advance.
The written proposal and service documents set out the scope and acceptance criteria. We can coordinate technical matters with your hosting provider within the agreed scope.
What the handover records
The record for your agreed work covers:
- The change
- The component, version or package, setting and agreed action.
- Verification of the fix
- How it was checked, the observed result and any limitation.
- Website functions
- The selected action — form, order or sign-in — and the actual test result.
- Open items
- What the completed fix does not cover and the proposed next step.
Tell us what’s happening
Briefly describe the issue and choose how you would like to message us. You can simply explain the hosting warning. We will clarify any missing information and suggest the next step.
Before you get in touch
Can I contact you if I don’t know our PHP version or server setup?
Yes. Describe the issue and add your website if you wish. If your host sent a warning, summarise it without including sensitive information. We can clarify the technical details with you or your hosting provider.
What will it cost, when can you start and how can we pay?
We confirm the price and available start time after discussing the issue. The estimate depends on the server setup, application, access, testing and any migration needed. If a separate diagnosis is required, we agree its price and deliverable first. Sending a request does not start emergency work. Card payment is available after agreement; you receive the total amount, currency and terms before paying.
Can you update our existing server?
That may be possible if a suitable fix is available for your setup and the application is compatible with the changes. Otherwise, we can propose a separate migration plan covering the new environment, testing, data transfer and the agreed switch.
Does a vulnerability warning mean our website has been hacked?
The warning alone does not establish that. ENISA’s statement of 21 October 2026 names critical vulnerabilities CVE-2026-109618 and CVE-2026-109619. Your server’s exposure needs to be checked. Suspected compromise requires a separate assessment.
Can you maintain the server after the update?
Yes, maintenance is agreed separately, including the components covered, update checks and working schedule. This offer does not include 24/7 incident response or a fixed response time.
Can you work with a company in our country?
We work remotely with companies in different countries. Our main format is written communication in Russian or English, from the initial discussion to acceptance of the work. You can message at any time; our team replies during business hours. Calls are available by prior arrangement. We confirm whether we can take on your project and agree the terms before work starts.