Skip to content
Sign in

Films · IT security · PHP2Shell

Explainer film · IT security

PHP2Shell

The end

PHP2Shell

A worker shares its memory across many requests; after an abort a pointer can keep pointing into freed memory and reveal foreign data. The update closes the hole, stopgap measures only partly.

0:00
−2:38
Chapter 1 · One server, many requests

Try the app yourself

We store questions without any link to you; selected ones appear anonymously as frequent questions.

PHP2Shell

IT security · PHP2Shell

NewOct 22, 2026 · 4 chapters

An explainer film in four chapters on the PHP flaw PHP2Shell: how a PHP worker handles many requests in the same memory, why a pointer dangles into freed memory after an out-of-memory abort, how a stranger’s password ends up in the attacker’s cookie, and what protects you now. Principle only, no exploit details. Pause anywhere and ask.

How a film works on heyprof

Every film here listens. Pause it, ask it questions and let it continue with your own examples.

  1. PauseTap pause or press the space bar. The film waits right at that moment.
  2. AskTap “Ask” and type what you want to know. The answer comes inside the film, with picture and voice.
  3. Steer itTell it what to show, for example “Do this with z = 2 − 3i”. The film sets up the app and works it out.
  4. Try it yourselfWhile it is paused, drag points and sliders yourself. “Continue” takes you back into the film.

Without an account: five questions per visit. With an account you can also ask by voice.

Comments