PHP Upgrade and Code Update Service for Old Websites
Still on an old PHP version? We can help.
Many older websites stop working when they are switched to a new PHP version, so they stay on versions that no longer receive security updates and remain exposed to security risks. Nethub reviews and updates your website code with minimal changes so that it runs on PHP 8.2 or later. Your website content and data stay the same.
Request a QuoteWhy act now?
In October 2026, the PHP project announced two critical security vulnerabilities (CVE-2026-109618 and CVE-2026-109619). Attackers may be able to break into a website without logging in, and read or change its files and database.
PHP 8.2 and later have official fixes. PHP 7.3 and older (including PHP 5.x) have no fix at all, so websites on these versions are still at risk.
| PHP version | Status | Recommendation |
|---|---|---|
| 8.2 to 8.5 | Still receive official security updates, and the fix for these vulnerabilities is available | No version change needed |
| 7.4 to 8.1 | End of life (EOL). PHP has not released a fix for these vulnerabilities. Some third parties (such as Plesk and the Remi repository) have released their own fixes, but they are unlikely to do so again in the future | Upgrade to 8.2 or later as soon as possible |
| 7.3 and older (including 5.x) | End of life, and there is no fix for these vulnerabilities | Upgrade to 8.2 or later as soon as possible |
Similar vulnerabilities will keep appearing. This time, the fixes for PHP 7.4 to 8.1 came from a few third parties, not from the PHP project, which is an exception. When new vulnerabilities are found, these end-of-life versions are unlikely to get any fix, and websites on them will keep running with known security holes.
Why many websites still run old code
Development has stopped
The website was built years ago and has not been updated since, so its code is still on the version it was built with.
No one maintains it
The original developer no longer maintains the website, or has closed down, and no one in the company knows the website code.
A rebuild costs too much
Updating the current system can look like more work than starting again, but rebuilding the website takes a lot of time and money, so the website is left as it is.
Our approach does not require a rebuild. We only change the parts of the existing code that do not work with the new PHP version, so the website can move to a PHP version that still receives security updates. The time and cost are usually much lower than a rebuild.
What are the risks of staying on an old PHP version?
- Website break-in: attackers may be able to read or change all of the website's files without logging in.
- Data leaks: confidential data in the website and its database may be stolen, such as customer data, orders and login details.
- Damage to your reputation: the website may be used to spread malware to visitors, or be flagged as dangerous by search engines such as Google and by browsers.
- Service suspension: a compromised website may be used to send spam or use up server resources. To protect other customers, hosting providers usually need to suspend such a website until the problem is fixed.
Why not just switch the PHP version?
New PHP versions have removed many old features. If the website code still uses them, the website will show errors after the switch. Common problems include:
The website does not load
The whole website shows a blank page or an error message. For example, the old way of connecting to the database (the mysql_ functions) was removed in PHP 7.
Some functions stop working
Admin login, form submissions, file uploads or sending email no longer work.
Error messages on the page
Pages show many warnings or code, which looks unprofessional to visitors and may reveal server information.
What the service includes
- Code review: we check how the website code behaves on the new PHP version and list what needs to be changed.
- Minimal code changes: we only change the parts that do not work with the new PHP version. The website design, content and functions stay the same.
- Testing in a separate environment: we test the website and the main admin functions on the new PHP version on a test server first, and only apply the changes to the live website once they work.
- Change record: we provide a list of every change and the reason for it, for your future maintenance.
- Rollback: we back up the website before applying the changes, so it can be restored to its previous state if needed.
The service covers custom-built PHP websites as well as older versions of website systems such as WordPress, OpenCart and Joomla. The exact scope of work will be stated in the quotation after we review your website.
How it works
Send us a request
Fill in the request for quotation form with your website address and current PHP version (if known).
Review and quotation
We review the website code, then send you a quotation and the estimated time needed.
Update and testing
Once you accept the quotation, we update the code and test it in a test environment.
Go live
We back up the website, apply the update, switch the website to the new PHP version, and check the website again.
Frequently asked questions
Does the website need to go offline during the update?
Usually not. The code is updated and tested in a test environment first. The website may be briefly unavailable only when the update is applied to the live website and the PHP version is switched.
Will my website content or database be changed?
We only change the website code, not the website content. If a database change is necessary, we will explain it and ask for your approval first, and list it in the change record.
Why not rebuild the website?
Rebuilding a website means redesigning it, moving the content and testing every function again, which takes more time and costs more. If the design and functions of your website still meet your needs, updating the code to support the new PHP version is usually the faster and more economical option.
Can you help if Nethub did not build the website?
Yes. As long as the website uses PHP, we can review it first and give you a quotation based on what it needs.
Will the website be completely free of security issues after the update?
After the update, the website can run on a PHP version that still receives official security updates, which reduces the risk from known vulnerabilities. If we find other security issues in the website code during the review, we will let you know and suggest how to fix them.
Request a quote
Send us your website address and current PHP version (if known). We will review the website code first, then send you a quotation and the estimated time needed.
