A security notice, an ageing website, or an upgrade that broke something? We diagnose the problem, test the repair and help you move forward with a rollback plan.
This service is exclusively for business websites and PHP services in Hong Kong. We diagnose faults, assess legacy code and agree the repair, migration and testing scope before paid work.
We work with legacy PHP 5.x sites as well as PHP 7.x and 8.x applications, including custom websites and backend services. Repairs and migration paths are assessed against the available source code, hosting access and third-party dependencies.
02 / A recent maintenance project
A PHP upgrade. Verified in production.
On 23 October 2026, Lampstand Technology upgraded a Hostinger-hosted website and its separate WordPress showcase installation.
The main site's content, uploads and active theme were preserved through a staged upgrade and live-page verification.
PHP migrated from 7.2.34 to the host’s 8.3.35 build, with incident-specific patch evidence checked against the provider’s advisory.
Separate, password-protected staging used before publishing. Website and database backups checked; a rollback path prepared.
Both WordPress cores passed official checksum verification. Six checked pages returned HTTP 200, with no fatal page errors or broken visible images observed.
The main homepage was also checked at a 390-pixel mobile width, with no horizontal overflow.
These were compatibility and browser smoke checks. Forms and external-service delivery were not tested in that project, and it was not a comprehensive security audit. Remaining legacy components were recorded for follow-up.
03 / How the work happens
A controlled change, from first check to handover.
We agree the scope, price and maintenance window before changing your live site.
Understand & quote
Review the symptoms, hosting setup and business-critical functions. Agree the work, exclusions and acceptance checks.
Back up & test
Check backups and the restore approach. Qualify changes in staging where the hosting and application allow it.
Repair & verify
Apply agreed changes and check the selected pages and workflows. Contact forms, login, checkout or scheduled jobs are included when specified in the scope.
Document & hand over
Provide the changes made, test results, rollback instructions and outstanding maintenance items.
Security context · checked 24 Oct 2026
What the recent PHP notices mean.
PHP’s October 21 advisory covers CVE-2026-109618 and CVE-2026-109619. An October 23 advisory addresses a further session-upload-progress issue, CVE-2026-115560, under a specific configuration.
Hostinger reports protections on its managed hosting, with VPS hosting excluded. A displayed version number alone may not show a provider’s backported fix. An old PHP branch can still need a planned upgrade even after that incident is patched.
We start by checking your hosting and application evidence. A security notice alone does not establish that your website was compromised.
We quote after reviewing the site, symptoms and required checks. A small compatibility repair and a multi-site migration have different scopes. Any paid diagnostic work is agreed first; submitting an inquiry does not commit you to a purchase.
Can you repair a website or service running PHP 5?
Yes. We assess legacy PHP 5.x websites and services for fault diagnosis, compatibility repairs and migration to a supported PHP version. Older code, database integrations and abandoned plugins or libraries may need changes or replacement. We confirm what can be repaired, what needs rebuilding and the testing plan before quoting. PHP 5 no longer receives upstream security support, so restoring a broken function does not make the old runtime secure.
Can you work on hosting other than Hostinger?
Tell us your provider and setup. We review WordPress sites and custom PHP services case by case; hosting permissions, source availability and third-party dependencies affect the work we can offer.
Can you guarantee no downtime or remove every security risk?
No. We reduce upgrade risk through backups, staging and agreed checks. Any expected maintenance window and limitations are set out before work. Suspected compromise requires a separately agreed assessment; this service does not promise forensic investigation or security certification.
What should I send first?
Your public website address, hosting provider, what changed or broke, and the functions you need working. Please remove secrets from error messages. We arrange access separately after agreeing the scope.
05 / Tell us about your site
Let’s work out what needs fixing.
Tell us about your Hong Kong business website or PHP service. We’ll review whether we can help and outline the next step and quote.
No passwords, API keys or database exports in this form. Access is arranged separately.