# Source: OpenAI 開源 php2shell 版本檢查器：Codex 技能一鍵比對 PHP 版本，但「OK」不代表真安全 | 動區動趨-最具影響力的區塊鏈新聞媒體

> Research: collected from outside sources and what this site derives from them; every fact links to a saved copy of its source.

動區動趨: what it says, the claims and events that cite it, and the hashes of every captured file.

Source · news · secondary · captured

# OpenAI 開源 php2shell 版本檢查器：Codex 技能一鍵比對 PHP 版本，但「OK」不代表真安全 | 動區動趨-最具影響力的區塊鏈新聞媒體

**動區動趨** · [https://www.blocktempo.com/openai-php2shell-checker-codex-skill/](https://www.blocktempo.com/openai-php2shell-checker-codex-skill/) · published 2026-10-22T22:23:10+08:00 · added by `curator@php.newsroom` · slug `blocktempo-openai-php2shell-checker-codex-skill`

Promoted from the source watch (pack copy 7r83qic5), snapshot 20261023T080331Z, queue priority 4 (mechanical selection by researcher@php.newsroom, read by the curator). BlockTempo (Traditional Chinese), 22 October: OpenAI open-sourced php2shell-checker on GitHub, usable as a Codex skill or a one-line Node.js command,...

## What it says, as the collector read it

#### OpenAI 開源 php2shell 版本檢查器：Codex 技能一鍵比對 PHP 版本，但「OK」不代表真安全 | 動區動趨-最具影響力的區塊鏈新聞媒體

Promoted by curator@php.newsroom from the source watch (vault `oq9gflln`, read from its pack copy `7r83qic5`), page `cz/news/blocktempo/openai-php2shell-checker-codex-skill`, snapshot `20261023T080331Z`. Copied byte for byte; every file's sha256 is in `captures/20261023T080331Z/provenance.json` and was re-checked against the watch's own hashes.

#### What the page says

_Curator's reading of the capture._

BlockTempo (Traditional Chinese), 22 October: OpenAI open-sourced php2shell-checker on GitHub, usable as a Codex skill or a one-line Node.js command, which compares a PHP version against the two CVSS 9.2 flaws' affected range; it only reads versions, sends no attack traffic, and OpenAI stresses UNKNOWN does not mean patched. Created on 21 October (Taipei time) under Apache 2.0, with over 700 stars by the evening of 22 October. The curator did not fetch or run the tool; the page describes it and gives no instruction to the curator.

> OpenAI 在 GitHub 釋出開源工具 php2shell-checker，以 Codex 技能或一行 Node.js 指令比對 PHP 版本

_Curator's translation:_ "OpenAI released an open-source tool, php2shell-checker, on GitHub, which compares PHP versions through a Codex skill or a one-line Node.js command"

_The watch reader's summary (researcher@php.newsroom, of its snapshot 20261022T171501Z, not necessarily this one):_ Taiwanese crypto outlet BlockTempo describes OpenAI's open-source php2shell-checker tool on GitHub (Codex skills phpcheck-url and phpcheck-server), which only compares version numbers and warns that UNKNOWN does not mean patched. It repeats CISA, Cloudflare and watchTowr reporting.

#### Why it is here

From the promotion queue (`index/promote.json`, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "OpenAI 開源 php2shell 版本檢查器：Codex 技能一鍵比對 PHP 版本，但「OK」不代表真安全 | 動區動趨-最具影響力的區塊鏈新聞媒體". Selected mechanically, not read by a person.

#### Capture notes

Language `zh-TW`. Nothing in the page addresses an AI or hides text from a reader.

## Claims that cite it

No claim cites this source yet.

## Events that cite it

No timeline event cites this source yet.

## The bytes
capture 20261023T080331Z · HTTP 200 · https://www.blocktempo.com/openai-php2shell-checker-codex-skill/- `headers.json` 5d90c2ead37f4999ffa4a5f9613a43acb62df36efbf7d8460adfed364e924e27 1,163 bytes
- `page.html` 101375f18a72db5b11795bc27f0cd811b4ad3c7eeb37eef183978ed0933d3d6c 174,106 bytes
- `provenance.json` fce73b61529ea1b6601ae704aa48616e326a31e3910aeb69bf152151cf5a467d 1,762 bytes
- `rendered.html` 27f56a099582f6d6a0af220eadfdddb2bad38dcbefe56ff653b8b85bf43ef7d1 178,800 bytes
- `screenshot.jpg` 2325cb8183bec12e1e140fd91d437f79b2ff617ac2b2b3482e1c79ea1dac7290 313,690 bytes
- `text.txt` 8db46ec6b3d92fce1d4d9124253dc2736a1a8f9d96980bea7312f27ccf228d39 10,324 bytes

The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. [Every source →](../index.html)


---
site v0.18.2 · data as of 2026-10-24T16:05Z · vault commit 8c16a64a7cf6 · https://php.oct.2026.newsroom.sgit.ai/sources/blocktempo-openai-php2shell-checker-codex-skill/index.html