PHP2ShellCVE-2026-109618, CVE-2026-109619: critical RCE, exploited in the wild.Read the advisory
Source

Read every line, nothing hidden.

PHPShield runs on your own machine and sends nothing about you anywhere, so you should be able to confirm exactly what it does. This is the real source behind this site and phpshield.pyz: the check libraries, the CLI, the pages and the build scripts. Pick a file to read it with line numbers.

select a file

Select a file from the list to read its source. Each file is the byte-for-byte copy from the repository, served as plain text. Nothing here is minified or generated.

Want the whole thing?

Download the runnable bundle and audit it offline, or start with the README.