Before you begin
You’ll need access to cPanel’s File Manager and the document root for the domain you want to check. Common document roots include public_html for the primary domain and a domain-specific folder for addon domains. Check the domain’s entry in cPanel’s Domains page if you’re unsure.
1. Open the correct document root
- Sign in to cPanel.
- Open File Manager.
- Go to the document root for the exact domain you want to inspect. Don’t assume every domain on the account uses the same folder or PHP handler.
2. Create a short-lived PHP file
Create a new file named runtime-check.php. Add the following minimal content:
<?php
header('Content-Type: text/plain; charset=utf-8');
echo 'PHP Version: ' . PHP_VERSION . "\n";
echo 'PHP SAPI: ' . PHP_SAPI . "\n";
echo 'PHP Binary: ' . PHP_BINARY . "\n";Save the file. Avoid using phpinfo() for routine version checks: it can expose server configuration details. If you must use it for troubleshooting, restrict access and remove the file immediately afterward.
3. Load it over HTTPS
Visit https://your-domain.example/runtime-check.php in a browser, replacing the example domain with yours. You should see output similar to:
PHP Version: 8.5.12
PHP SAPI: litespeed
PHP Binary: /path/to/phpThese values describe the PHP runtime that handled this web request. Repeat the check for each domain or subdomain that may use a different document root, PHP selector, or handler. The command-line PHP version in Terminal or SSH may be different from the version serving the website.
4. Remove the file right away
Return to File Manager and delete runtime-check.php. Then load the URL once more. It should return a not-found response. Do not leave diagnostic scripts in a public web folder.
What the result tells you
The output identifies the PHP version and runtime handling your website request. This is useful when checking site compatibility, planning an upgrade, or giving Web3Rivers support the details needed to help with a PHP-related issue.
A version string does not list every security fix applied to the runtime. Web3Rivers goes to extensive lengths to provide backported security updates across the PHP versions we offer, including legacy versions, so that customers can continue using the version their applications need while receiving important security protections.
If you need help identifying the PHP version assigned to your domain or planning an upgrade, contact Web3Rivers support and include the domain, PHP Version, and PHP SAPI shown by the check. Never send your cPanel password or leave the temporary diagnostic file online.
Next articlePHP security alert: October 2026 ↗