phpchecker = PHP Malware/Hacker/Security Vulnerability Checker

Scan your website for potential security vulnerabilites

Last updated on
Subscribe to Internet Tips and Tools Feed

Here is a php script to check your Apache/PHP website for potential security vulnerabilities. Also if your site has been hacked this php script can scan for potential content injection by hackers.


  • Checks Apache and PHP versions
  • Checks Crontab jobs
  • Scans files for mysql injection vulnerabilities
  • Scans files for scripts that can send email
  • Informs of files that have been added or modified recently on the server
  • Scans files for SPAM words that might have been injected by a hacker
  • Scans for 666 file permissions and 777 folder permissions
  • Scans for files that are php files but are disguised as image files
  • Checks for scripts that have the ability to accept uploading of files
  • Checks for .user.ini, php.ini, .htacess, httpd.conf hacked settings and vulnerabilities
  • Checks for potential redirects by hackers in scripts


Downloaded 0 times.
Please make a donation to reveal the download link.

How To Use

Download the file and then you can customize the following settings if you desire:

Before uploading this file to your server you should rename it to a random name so that hackers can't use it to find vulnerabilities. Upload the php file to you server and then go to the file in your browser for checking.


11/3/2019 - Version 1.2 - Now also looks for fputs and fputcsv as potential threats.

7/18/2019 - Version 1.1 - eval() is always a high level threat. Also added create_function() as a high level threat.

7/8/2019 - Version 1.0 - phpchecker created.

Last updated on December 16, 2020
Created on July 8, 2019

Back to
Subscribe to Internet Tips and Tools Feed        

User Comments

There are 3 comments.

Displaying first 50 comments.

1. Posted By: Bob - - October 28, 2020, 3:59 am
Parse error: syntax error, unexpected '[' in phpchecker.php on line 249

2. Posted By: Jeff - - October 31, 2020, 6:15 pm
Hi Bob,

It appears you are using an old version of PHP that does not support the Array Initialization Construct: []
Convert the line to this:


3. Posted By: Bob - - October 31, 2020, 7:36 pm