This guide explains why it is dangerous to use a PHP version that is no longer officially maintained and how to use a more recent PHP version with a website hosted by Infomaniak.

Is an outdated version of PHP dangerous?

When you use a (soon to be) vulnerable version of PHP on one or more of your sites, a warning message appears in the dashboard of the affected hosting services.

The PHP language evolves regularly and when you use a PHP version that is no longer updated, you expose your website to security risks. Malicious individuals could, for example, exploit known security vulnerabilities to gain access to your site and alter its content. It is therefore strongly recommended to always use a recent version of PHP.

Three statuses are possible:

• The PHP version is fully supported‍: no action is required
• The PHP version only receives security updates‍: it is recommended to use a more recent version of PHP
• The PHP version is no longer updated‍: it is strongly recommended to use a more recent version of PHP

Learn more: http://php.net/supported-versions.php

Using a more recent version

The latest versions of PHP are more performant and speed up website loading.

Before using a more recent version of PHP, it is necessary to take the following precautions:

• If your site runs on a CMS or a web application (WordPress, Joomla, Drupal, etc.), it is recommended to check that its current version is compatible with the PHP version you plan to use
• If your site was developed manually, it is necessary to consult the official PHP documentation to learn about modified functions and potential incompatibilities

If you encounter issues after migrating a site to a newer version of PHP, it may be possible to revert to a previous version of PHP if it is still supported.