The most important thing I did to protect my clients from php2shell was to create cron-triggered bash scripts that checked for updated releases of patched PHP versions and then safely installed them and restarted the servers. Within 2 minutes of the patches being released, my servers were automatically updated and restarted.
commit 1a78f5a