Home / How We Work

How we handle your PHP upgrade

Your live site stays as it is; we work on a copy. We quote only the steps you need.

Work steps

One patch isn’t enough. We block it in four layers.

What you need depends on your server environment and whether you’ve been hit. After the diagnosis we bundle only what you need into a quote.

STEP A · 1–2 hours

Emergency shield

We put a Cloudflare security proxy in front to filter attack requests before they reach your server. It doesn’t touch the server, so it’s the fastest.

  • Web application firewall (WAF) rules, blocking suspicious upload requests
  • Hide the server’s real IP + allow only connections via Cloudflare
  • Account created in your name; you own it
WhenServer work isn’t possible right now, or you need to buy time until the patch
STEP B · Same day

Server patching & configuration

We update PHP to a fixed version, apply mitigation settings and restart the web server, then confirm the version actually running.

  • Apply PHP 8.2–8.5 fixed versions / distribution backport packages
  • Temporary mitigations such as blocking session.upload_progress
  • Restart PHP-FPM / Apache and verify the fix is live
WhenAny server you manage yourself (the root fix)
STEP C · 1–2 days

Hacking-trace inspection

We check whether someone already got in during the pre-patch exposure window. We analyze logs and files to find and remove web shells.

  • Analysis of access and error logs since 10/17
  • Detection and removal of web shells and tampered files
  • Help rotating DB passwords and API keys
  • Processed on our own analysis equipment; customer data is not sent to external AI services
WhenServers open to the internet since before 10/20, or servers that showed abnormal symptoms
STEP D · 2–5 days

Legacy migration & clean rebuild

We move unpatched PHP 5, 7 and 8.1 to 8.3 or later. Infected servers aren’t repaired; we stand up a clean new server instead.

  • Compatibility pre-testing of the site on a copy
  • Compatibility fixes for GNUBoard, YoungCart and WordPress
  • Build a new server, migrate data, verify key features
WhenRunning PHP 8.1 or older, a confirmed breach, or the site breaks when the version goes up
Your situationRecommended action
Web hosting, still on an old versionAD Shield, then version migration
Self-managed server, PHP 8.2 or laterAB Shield + patching & configuration
Self-managed server, exposed since before 10/20ABC + breach inspection
PHP 8.1 or older, or suspected hackingACD Inspection, then clean rebuild
Process

From inquiry to report

01

Inquiry

Fill in the form. Don’t include server passwords.

02

We contact you

We will contact you within 1 hour. We review your situation and run a free diagnosis.

03

Quote confirmed

We explain the scope and price, then you confirm.

04

Payment

Bank transfer or card.

05

Work

Access details are passed via a separate secure channel; we start right away.

06

Report & re-inspection

Results report provided, 30-day re-inspection.

Principles

We start with what a security company should get right.

We diagnose and do the work ourselves

Global Vision Co., Ltd. (AI Division) diagnoses and does the work directly.

Backup before work

We keep the pre-change state and roll back immediately if anything goes wrong.

No overpromising

No one can guarantee “100% hack-proof”. Our report tells you exactly what we did and what remains.

No data leaves our hands

Log and source analysis runs on our own equipment. After the work, we destroy the materials and access details we received.

We’ll upgrade your old PHP. Up to 20 pages for KRW 300,000.

Call Us Free Diagnosis