Updating from unsupported to supported PHP versions

You own a company that runs one or more PHP applications in production.

You have discovered that one or more of these PHP applications use an unsupported PHP version, and you have learned that running and maintaining PHP applications using an unsupported PHP version may be risky and costly. You are now willing to update these PHP applications from unsupported to supported PHP versions.

However, you lack the resources because you do not have an internal team of developers, external agencies, or freelancers capable and willing to take up the task.

As an experienced Software Engineer, I can update your PHP applications from unsupported to supported PHP versions to reduce the risk and costs of running and maintaining these applications.

Understanding the lifecycle of a PHP version

Initial release

The initial release marks the beginning of the lifecycle of a PHP version.

Active support

Active support for a PHP version begins with the initial release and ends two years after the initial release.

During active support, maintainers fix bugs and security issues and release new patch versions.

The following PHP versions currently have active support:

  • PHP 8.3
    • initial release on November 23, 2023
    • active support ends on November 23, 2025
  • PHP 8.2
    • initial release on December 8, 2022
    • active support ends on December 8, 2024

💡 Also see the official list of supported PHP versions.

Security support

Security support for a PHP version begins with the end of active support and ends one year after the beginning of security support.

During security support, maintainers fix critical security issues and release new patch versions.

The following PHP versions currently have security support:

  • PHP 8.1
    • initial release on November 25, 2021
    • active support ended on November 25, 2023
    • security support ends on November 25, 2024

End of life

The end of security support marks the end of the lifecycle of a PHP version.

The following PHP versions currently do not have security support:

  • PHP 8.0
    • initial release on November 26, 2020
    • active support ended on November 26, 2022
    • security support ended on November 26, 2023
  • PHP 7.4
    • initial release on November 28, 2019
    • active support ended on November 28, 2021
    • security support ended on November 28, 2022
  • PHP 7.3
    • initial release on December 6, 2018
    • active support ended on December 6, 2020
    • security support ended on December 6, 2021
  • PHP 7.2
    • initial release on November 30, 2017
    • active support ended on November 30, 2019
    • security support ended on November 30, 2020
  • PHP 7.1
    • initial release on December 1, 2016
    • active support ended on December 1, 2018
    • security support ended on December 1, 2019
  • PHP 7.0
    • initial release on December 3, 2015
    • active support ended on January 4, 2018
    • security support ended on January 10, 2019
  • PHP 5.6
    • initial release on August 28, 2014
    • active support ended on January 19, 2017
    • security support ended on December 31, 2018
  • PHP 5.5
    • initial release on June 20, 2013
    • active support ended on July 10, 2015
    • security support ended on July 21, 2016
  • PHP 5.4
    • initial release on March 1, 2012
    • active support ended on September 14, 2014
    • security support ended on September 3, 2015
  • PHP 5.3
    • initial release on June 30, 2009
    • active support ended on July 11, 2013
    • security support ended on August 14, 2014
  • PHP 5.2
    • initial release on November 2, 2006
    • active support ended on November 2, 2008
    • security support ended on January 6, 2011
  • PHP 5.1
    • initial release on November 24, 2005
    • active support ended on November 24, 2007
    • security support ended on August 24, 2006
  • PHP 5.0
    • initial release on July 13, 2004
    • active support ended on July 13, 2006
    • security support ended on September 5, 2005
  • PHP 4.4
    • initial release on July 11, 2005
    • active support ended on July 11, 2007
    • security support ended on August 7, 2008
  • PHP 4.3
    • initial release on December 27, 2002
    • active support ended on December 27, 2004
    • security support ended on March 31, 2005
  • PHP 4.2
    • initial release on April 22, 2002
    • active support ended on April 22, 2004
    • security support ended on September 6, 2002
  • PHP 4.1
    • initial release on December 10, 2001
    • active support ended on December 10, 2003
    • security support ended on March 12, 2002
  • PHP 4.0
    • initial release on May 22, 2000
    • active support ended on May 22, 2002
    • security support ended on June 23, 2001

💡 Also see the official list of unsupported PHP branches.

Understanding costs involved with using unsupported PHP versions

Security vulnerabilities of unsupported PHP versions

When your PHP applications use unsupported PHP versions, these applications may be more insecure to run because of potentially undiscovered and unfixed security vulnerabilities.

Security vulnerabilities exploited by malicious actors could result in loss of data, loss of revenue, and loss of reputation - all of which may be tough to restore.

The longer you wait to update your PHP applications from unsupported to supported PHP versions, the longer you expose these applications and yourself to risk.

Hosting costs of unsupported PHP versions

When your PHP applications use unsupported PHP versions, these applications may be more costly to host because of the limited availability and additional costs charged by PHP hosting providers.

PHP hosting providers typically only support a limited range but will charge extra for extended support of otherwise unsupported PHP versions.

The longer you wait to update from unsupported to supported PHP versions, the longer you may incur higher costs for hosting your PHP applications.

Performance costs of unsupported PHP versions

When your PHP applications use unsupported PHP versions, these applications may be more costly to run because of the potentially unrealized performance gains from actively supported PHP versions.

Actively supported PHP versions bring significant performance improvements compared to their unsupported predecessors, potentially speeding up the applications running on them and increasing the number of requests these applications can serve.

The longer you wait to update from unsupported to supported PHP versions, the longer you may incur higher costs and observe lost revenue from running your PHP applications.

Maintenance costs of unsupported PHP versions

When your PHP applications use unsupported PHP versions, these PHP applications may be more costly to maintain because of the limited support from third-party vendors and the limited availability of PHP developers.

Third-party open-source PHP package and framework vendors typically adopt different PHP version support policies. Depending on the goals they pursue and the resources at hand, these vendors may drop support for otherwise unsupported PHP versions as soon as possible. The outdated or even abandoned versions of their PHP packages and frameworks may receive critical security fixes but will certainly not receive any new features.

PHP developers experienced with unsupported PHP versions may be hard, if not impossible, to find. Some PHP developers may have switched gears and moved from development to management, while others may have changed careers entirely. Some PHP developers may not be interested in dealing with legacy PHP applications, while others lack the necessary experience and worsen the situation.

The longer you wait to update from unsupported to supported PHP versions, the longer you may incur higher costs for maintaining and eventually updating these PHP applications.

Are you ready to update from unsupported to supported PHP versions?