PHP2Shell: The Request Ended, the State Survived
PHP2Shell crosses two different boundaries: invalid cleanup in one request and stale state consumed by the next. Trace SAPI prerequisites, verify both patches, and separate partial mitigations from remediation.
