Skip to content
BackNov 5
Brent M.

Brent M.

Senior PHP/WordPress Engineer | PHP2Shell Patching, Upgrades & Cleanup

If your WordPress site or PHP application is exposed to PHP2Shell (CVE-2026-109618/109619), I can help you find out whether it's been compromised, clean it up, and move it onto a patched, supported stack without breaking what your business depends on. I've spent 17+ years building and maintaining PHP and WordPress systems, from small business sites to enterprise platforms. I recently wrote and published php2shell-check, an open-source, read-only triage script that checks WordPress sites for signs of PHP2Shell compromise (MIT licensed, on GitHub: php2shell-check What I can do for you: - Compromise triage and cleanup: Confirm whether you've been hit, find the entry point, remove backdoors and rogue plugins, recover content safely, and harden the site against reinfection. In a recent engagement I took over a hacked WordPress site. I traced the likely entry through an outdated premium plugin, removed malicious plugins dropped into wp-content, restored a clean baseline while preserving newer content, and assessed the other sites on the same hosting account. - PHP and WordPress upgrades: Move sites and applications off end-of-life PHP versions, resolve plugin and theme incompatibilities, and update core. I test on staging first and keep a rollback plan ready. - Legacy PHP modernization: Untangle custom LAMP applications and either stabilize them or migrate them forward. I recently migrated a manufacturer's legacy PHP accounting and inventory system to Next.js and .NET. At a Fortune 500 manufacturer, I built a nightly WordPress data importer with delta syncs, WP-CLI, and cron. Once a system is secure and current, I can also help make it ready for AI. That includes LLM integrations, MCP servers that let assistants like Claude and Gemini answer questions and book appointments against a business's own data, and Python/FastAPI and Google Cloud Run services that back WordPress with AI workflows. I've led development teams, worked within enterprise IT, and run my own consultancy, so I can own a system end to end or slot into an existing team. I'm available for urgent remediation work now, and for steady engagements of 15 to 40 hours a week. Stack: PHP, WordPress, WP-CLI, MySQL, LAMP, Python, FastAPI, TypeScript, React, Next.js, Postgres, GCP, LLM integration, MCP

🇺🇸Brecksville, United States$100/hr100% JSS4.87 (30)Since May 2015

Skills

This freelancer has chosen to keep their earnings private.