PHP 7.4 end of life

PHP is the language your website’s code runs on. PHP 7.4 was the last version of PHP 7 and was widely used for years. It stopped getting security fixes on 28 Nov 2022. That is what “end of life” means: the version still runs, but no one fixes its security problems any more.

Start a rescue request → A person reviews every request. No obligation.

What end of life means for your website

Your site does not stop working on the end of life date. It keeps running, but any new security weakness found in PHP 7.4 will never be fixed. Over time that makes the site easier to break into, and a break in can affect other things on the same hosting.

Insurers, payment providers and IT policies can also expect software to be on a supported version. If you fill in security questionnaires, the PHP version may well come up.

Why your host is pushing you to upgrade

Hosting providers do not want old, unpatched software on their servers. Many are removing PHP 7.4 or moving sites off it automatically. Some offer to keep it running for an extra fee for a while, which buys time but does not fix anything.

If your host has named a date, that is the date to plan around. If the switch happens before your site is ready, the site may show errors or a blank page.

Why the move from 7.4 is not just a setting

The next step from PHP 7.4 is PHP 8, and PHP 8 is much stricter. Many problems that PHP 7.4 shrugged off with a small warning now stop the page entirely, which is how “it used to just show a warning” becomes a blank page. Things PHP 7.4 had already flagged as going away, such as reading text with curly brackets ($str{0}) and the old magic quotes functions, are worth fixing before the switch.

A sensible timeline

You do not need to rush into a change you have not tested, but it pays to start early. In plain terms the steps are:

  • Find out the date your host has set, if there is one
  • Have the site reviewed so you know what needs changing
  • Have the changes made and tested on a private staging copy, with a full backup taken first
  • Switch the live site to a currently supported version at a quiet time, with a plan to switch back quickly if something unexpected appears
  • Keep an eye on the error logs for a few days, because some code only runs weekly or monthly

Where to next: a supported version

No single PHP version suits every site. We move you to a currently supported version that your host offers and your code can run on. The table on this page shows which versions get security fixes today and when that support ends, so you can see how long you have before the next upgrade is due.

If your host’s date is close, tell us when you get in touch so we can plan around it.

PHP versions and their support dates

Bug fixes come first; after that a version gets security fixes only, then nothing at all.

VersionReleasedBug fixes untilSecurity fixes untilStatus
PHP 5.6 28 Aug 2014 19 Jan 2017 31 Dec 2018 No longer supported
PHP 7.0 3 Dec 2015 4 Jan 2018 10 Jan 2019 No longer supported
PHP 7.1 1 Dec 2016 1 Dec 2018 1 Dec 2019 No longer supported
PHP 7.2 30 Nov 2017 30 Nov 2019 30 Nov 2020 No longer supported
PHP 7.3 6 Dec 2018 6 Dec 2020 6 Dec 2021 No longer supported
PHP 7.4 28 Nov 2019 28 Nov 2021 28 Nov 2022 No longer supported
PHP 8.0 26 Nov 2020 26 Nov 2022 26 Nov 2023 No longer supported
PHP 8.1 25 Nov 2021 25 Nov 2023 31 Dec 2025 No longer supported
PHP 8.2 8 Dec 2022 31 Dec 2024 31 Dec 2026 Supported
PHP 8.3 23 Nov 2023 31 Dec 2025 31 Dec 2027 Supported
PHP 8.4 21 Nov 2024 31 Dec 2026 31 Dec 2028 Supported
PHP 8.5 20 Nov 2025 31 Dec 2027 31 Dec 2029 Supported

Dates from php.net. Your host may offer only some of these versions.

Questions

Is my website unsafe right now?

Not automatically, and nothing changes overnight. But PHP 7.4 gets no security fixes, so the risk grows the longer the site stays on it. Planning the upgrade now is far easier than fixing a site after a problem.

Can I stay on PHP 7.4 if my host allows it?

For a short time, if your host offers it. Treat it as breathing room to plan and test the upgrade, not as a solution.

How long will a newer version last?

Each PHP version gets security fixes for a set period. The table on this page shows the end date for each one, so you can see how long a currently supported version has left.

Will you need my passwords?

Not in the enquiry form, and never by email. Once you agree to go ahead, we arrange access securely, usually by you adding us as a user.

How it works

  1. 01

    Tell us what’s happening

    Share your web address, paste the warning from your host, or describe the problem. No PHP knowledge needed.

  2. 02

    We review

    A person looks at what you sent and works out what needs checking.

  3. 03

    We recommend a plan and quote

    You get the recommended approach, a clear scope and a price, including anything that needs further investigation.

  4. 04

    We test and upgrade once agreed

    Where feasible, changes are tested on a separate copy before going live. Nothing starts until you approve.

Let’s get your site on supported PHP.

Tell us what’s happening. A person replies.

I received a warning →