Acceptable Use Policy

Last updated: October 23, 2026

This policy defines what you may and may not do with php2shell. It applies to the website, the API, the analysis features and the AI assisted analysis.

1. Prohibited activities

You must not, and must not allow anyone to:

• Break the law - use the service for any illegal purpose, or to facilitate illegal activity.
• Attack or disrupt - probe, scan, overload or disrupt the service, its infrastructure or any third party system, including through automated requests that degrade availability.
• Infringe rights - upload code, documentation or other material that infringes a copyright, trademark, trade secret or other right, or that you are not allowed to analyse.
• Distribute malware - upload or process malicious code, backdoors, ransomware or exploit code.
• Send unsolicited communication - use the service to send spam, to harvest email addresses or to run any bulk outreach campaign.
• Scrape or resell - systematically copy the service, its rule set, its reports or its documentation, or resell access to it.
• Bypass the limits - share, resell or automate a licence key or a token quality pack beyond what the plan allows, or attempt to bypass quotas, rate limits or credit accounting.
• Misrepresent the output - present an automatic fix as if it had been written and reviewed by a qualified developer.
• Store or share model outputs as training data - use the AI assisted analysis to build or train a competing dataset without our written permission.
• Harm children - upload a photograph of a minor, or ask for any sexualised, exploitative or otherwise unsafe content that involves a child. This is a zero tolerance rule, see section 4.

2. Content you submit

• You keep ownership of the code you submit. You grant us only the limited right needed to process it for the purpose of the service (scan, fix, report).
• You must not submit code that you are not authorised to analyse, for example code that contains a third party licence you cannot comply with, or code obtained through an illegal means.
• You are responsible for removing credentials and personal data from the code before you submit it, even though the AI assisted analysis de-identifies the fragment automatically.

3. AI assisted analysis

• The AI assisted analysis is a tool, not a professional opinion. You must review its output and validate it before using it.
• Do not use the analysis to produce content that is unlawful, that infringes a right or that is intended to deceive (for example a false security assessment).
• Do not attempt to use the analysis to generate malware, credential theft code or intrusive surveillance code.

4. Child safety and zero tolerance

This service applies a zero tolerance rule on child safety. The following behaviour is prohibited, is never performed on request and is never tolerated on the platform.

• Photographs of minors - uploading or submitting a photograph of a child or a minor is prohibited. The platform refuses such an upload, and the file is never analysed, stored or shared.
• Sexualised or exploitative content involving a child - asking the service to generate sexualised, exploitative or otherwise unsafe content that involves a child is prohibited with zero tolerance. Such content is never produced on request, under any circumstances, and no prompt style, framing or request of any kind changes that.
• Consequences - an account associated with such a request is suspended or terminated, the request is not served, and where the law requires it we report the matter to the relevant authorities.
• Reporting - a report about child safety content is handled through the reporting channel in section 7.

5. Fair use of the quotas

The licence plans include a monthly usage allowance. We may apply a fair use policy to keep the service available for everyone: sustained automated bulk uploads, repeated rescans of the same files without a business purpose, or attempts to exhaust the shared analysis capacity may be throttled or refused.

6. Consequences

• We may issue a warning, limit a quota, suspend an account or terminate it immediately when the policy is breached.
• For accounts that terminate a subscription in breach of the plan terms, no refund is due.
• Where the law allows it, we will notify you before a suspension and give you a chance to fix the issue.

7. Reporting an abuse

If you believe someone is abusing the service or using it to harm another system, or if you believe a request involves a child, report it to support@php2shell.top. This mailbox is the dedicated reporting channel for this policy.

• Every report is acknowledged within 2 business days.
• Every report is reviewed within 7 business days.
• The outcome of the review is communicated to the reporter, and the reported account is warned, suspended or terminated where the policy was breached.

8. Changes

We may update this policy. Material changes are announced on the site and by email to registered accounts. Continuing to use the service after the change means you accept the updated policy.