{"id":2508,"date":"2018-10-24T11:44:39","date_gmt":"2018-10-24T11:44:39","guid":{"rendered":"https:\/\/www.fastcomet.com\/blog\/?p=2508"},"modified":"2022-06-10T06:09:29","modified_gmt":"2022-06-10T06:09:29","slug":"legacy-php-versions-makes-your-website-vulnerable","status":"publish","type":"post","link":"https:\/\/www.fastcomet.com\/blog\/legacy-php-versions-makes-your-website-vulnerable","title":{"rendered":"Why Using Legacy PHP Versions Makes Your Website Vulnerable"},"content":{"rendered":"\n

The most used scripting language is PHP. It\u2019s rapidly evolving and after more than ten years without a significant upgrade to it, the scripting language introduced it\u2019s 7.0 version<\/a>. PHP 7 made a debut at the end of 2015. Recent years have witnessed the adoption of one very definite, while also consistent release process scheme. There has been a regular and predictable schedule new versions coming out every fall, earlier versions falling into maintenance, critical security issues, and the infamous End of Life (EOL) title. Each version gets supported actively for two years. Meanwhile, the third year gets only critical security-related updates. Using legacy PHP versions is bad for your site, and we will explain why.<\/p>\n\n\n\n\n\n\n\n

The last days of each year usually bring about a lot of reflection. A huge problem we are facing today is that many businesses, organizations, developers, and hosts have failed to keep up when it comes to supporting the latest versions of PHP. In fact, we\u2019re 2 months away from a state where the oldest version which had been supported will be 7.1. Yeah, indeed.<\/p>\n\n\n

\n
\"Currently<\/figure>\n<\/div>\n\n\n

Today we aim to discuss why it\u2019s so vital for everyone to use those latest versions of the scripting language, and mainly from a security point of view. Below, you would also find some shocking statistics on why keeping PHP up-to-date matters to you.<\/p>\n\n\n\n

The PHP Version Problem<\/h3>\n\n\n\n

Based on the W3Techs <\/a>recent <\/a>statistic report<\/a>, roughly 79% of websites today are running on PHP. At the end of the year, scheduled by 31\/12\/2018, the security support for our dear chap PHP 5.6.x will be discontinued officially, marking the end of an era, which also means that all support for versions from the 5.x branch of PHP, which means that roughly 62% of all websites, running on a PHP version have reached their EOL.<\/p>\n\n\n\n

Around 62% of all websites will run an unsupported PHP version in a few weeks<\/p><\/blockquote>\n\n\n\n

Therefore, starting off next year, around 62% of all websites that are still utilizing PHP 5.x would stop receiving their security updates due to the discontinuation of support. Inevitably, this will expose millions of websites around the globe to serious risks when it comes to security, which would also lead to poor performance. Consequently, if a hacker finds out about the vulnerability and decides to exploit it after New Year\u2019s Eve, a lot of websites and users would be at risk.<\/p>\n\n\n\n

WordPress and Its Current State<\/h3>\n\n\n\n

Based on official stats<\/a>, around 36% of the WordPress users had already updated to PHP version 7 and higher and only 6% use PHP 7.2. Also, we can easily notice that a vast majority of the users over 37% continue to use PHP 5.6. What\u2019s even scarier over 26% of all users run unsupported PHP versions. In December 2016, WordPress.org increased their official recommendation for users to go from the 5.6 to the 7 or higher version. As of summer 2017, WordPress has officially started recommending the use of PHP 7.2. The reason for that is because WordPress plans to continue being fully operational with some older versions of the scripting language the versions that have reached their EOL. An important thing to notice is the fact that WordPress, in its core in version 5.0, will support PHP 7.3<\/a>.<\/p>\n\n\n

\n
\"PHP<\/figure>\n<\/div>\n\n\n

At WordCamp Europe 2018<\/a>, representatives from different teams got together to encourage people to increase adoption of the modern versions of PHP. This can be done by being more proactive and vocal when it comes to the necessity of the latest PHP versions. All of this aligns perfectly with the things that the community already advocates constantly update the core of your WordPress and its plugins. The same principle should also be applied to the PHP versions<\/a>.<\/p>\n\n\n\n

Is Running an Old Version Pure Madness or is It Just a Minor Security Risk?<\/h2>\n\n\n\n

You might be wondering: \u201cWhy can\u2019t I just keep making use of the same version forever?\u201d It\u2019s a viable question, and we are able to shed some light on the matter.<\/p>\n\n\n\n

Using any of the older versions comes with the risk of exposing you to certain security vulnerabilities, holes, bugs, etc. Those have been fixed in the more recent versions of the scripting language. If one goes to the National Vulnerability Database (NVD) XML feed, they will be able to find lots of security vulnerabilities of the previous PHP versions. The feed is provided on CVE Details and includes additional info of the updates\u2019 impacts and severity. PHP 5 did, in fact, have a lot of vulnerabilities which were patched over time. If you\u2019re interested, everyone can check the vulnerability library of the 5.4 version<\/a>. Taking everything into consideration, if your website happens to be running on an older version of the language, some of the vulnerabilities may be still present and they can be easily exploited. Scary, huh? To make things even worse, the vulnerabilities are well known mainly among cybercriminals who constantly target websites that run on these earlier versions in order to easily exploit those projects.<\/p>\n\n\n\n

Much of this bad reputation that WordPress gets for being insecure is often due to the servers and sites still running unpatched versions of PHP. In more than half of the cases, when a certain version becomes obsolete, the website owners are unable to update, install script updates quickly enough to ensure their site is secure, and in some cases, they are not even aware such update was needed. Which urges the question\u2026<\/p>\n\n\n\n

It\u2019s Q4 2018, are you aware of what PHP version your site is using?<\/p>\n","protected":false},"excerpt":{"rendered":"

The most used scripting language is PHP. It\u2019s rapidly evolving and after more than ten years without a significant upgrade to it, the scripting language introduced it\u2019s 7.0 version. PHP 7 made a debut at the end of 2015. Recent years have witnessed the adoption of one very definite, while also consistent release process scheme. […]<\/p>\n","protected":false},"author":2,"featured_media":2517,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[140],"tags":[103,151,44],"class_list":["post-2508","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-security","tag-php","tag-php-7","tag-wordpress"],"featured_image_src":"https:\/\/www.fastcomet.com\/blog\/wp-content\/uploads\/2018\/10\/php-version-update.jpg","author_info":{"display_name":"Elena","author_link":"https:\/\/www.fastcomet.com\/blog\/author\/elenatileva"},"yoast_head":"\nLegacy PHP Versions Make Your Site Vulnerable - Reasons | FastComet<\/title>\n<meta name=\"description\" content=\"Is your site on PHP? \u27a4 You still don't want to use the latest PHP version? \u27a4Think again \u27a4 read more about legacy PHP versions from FastComet.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.fastcomet.com\/blog\/legacy-php-versions-makes-your-website-vulnerable\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Legacy PHP Versions Make Your Site Vulnerable - Reasons | FastComet\" \/>\n<meta property=\"og:description\" content=\"Is your site on PHP? \u27a4 You still don't want to use the latest PHP version? \u27a4Think again \u27a4 read more about legacy PHP versions from FastComet.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.fastcomet.com\/blog\/legacy-php-versions-makes-your-website-vulnerable\" \/>\n<meta property=\"og:site_name\" content=\"FastComet Blog\" \/>\n<meta property=\"article:published_time\" content=\"2018-10-24T11:44:39+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2022-06-10T06:09:29+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.fastcomet.com\/blog\/wp-content\/uploads\/2018\/10\/php-version-update.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1024\" \/>\n\t<meta property=\"og:image:height\" content=\"620\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Elena\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@ElenaTileva\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Elena\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Legacy PHP Versions Make Your Site Vulnerable - Reasons | FastComet","description":"Is your site on PHP? \u27a4 You still don't want to use the latest PHP version? \u27a4Think again \u27a4 read more about legacy PHP versions from FastComet.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.fastcomet.com\/blog\/legacy-php-versions-makes-your-website-vulnerable","og_locale":"en_US","og_type":"article","og_title":"Legacy PHP Versions Make Your Site Vulnerable - Reasons | FastComet","og_description":"Is your site on PHP? \u27a4 You still don't want to use the latest PHP version? \u27a4Think again \u27a4 read more about legacy PHP versions from FastComet.","og_url":"https:\/\/www.fastcomet.com\/blog\/legacy-php-versions-makes-your-website-vulnerable","og_site_name":"FastComet Blog","article_published_time":"2018-10-24T11:44:39+00:00","article_modified_time":"2022-06-10T06:09:29+00:00","og_image":[{"width":1024,"height":620,"url":"https:\/\/www.fastcomet.com\/blog\/wp-content\/uploads\/2018\/10\/php-version-update.jpg","type":"image\/jpeg"}],"author":"Elena","twitter_card":"summary_large_image","twitter_creator":"@ElenaTileva","twitter_misc":{"Written by":"Elena","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.fastcomet.com\/blog\/legacy-php-versions-makes-your-website-vulnerable#article","isPartOf":{"@id":"https:\/\/www.fastcomet.com\/blog\/legacy-php-versions-makes-your-website-vulnerable"},"author":{"name":"Elena","@id":"https:\/\/www.fastcomet.com\/blog\/#\/schema\/person\/9ef9240ced73eac50f0efa4cfeec79fb"},"headline":"Why Using Legacy PHP Versions Makes Your Website Vulnerable","datePublished":"2018-10-24T11:44:39+00:00","dateModified":"2022-06-10T06:09:29+00:00","mainEntityOfPage":{"@id":"https:\/\/www.fastcomet.com\/blog\/legacy-php-versions-makes-your-website-vulnerable"},"wordCount":915,"commentCount":0,"image":{"@id":"https:\/\/www.fastcomet.com\/blog\/legacy-php-versions-makes-your-website-vulnerable#primaryimage"},"thumbnailUrl":"https:\/\/www.fastcomet.com\/blog\/wp-content\/uploads\/2018\/10\/php-version-update.jpg","keywords":["php","php 7","wordpress"],"articleSection":["Security"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.fastcomet.com\/blog\/legacy-php-versions-makes-your-website-vulnerable#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.fastcomet.com\/blog\/legacy-php-versions-makes-your-website-vulnerable","url":"https:\/\/www.fastcomet.com\/blog\/legacy-php-versions-makes-your-website-vulnerable","name":"Legacy PHP Versions Make Your Site Vulnerable - Reasons | FastComet","isPartOf":{"@id":"https:\/\/www.fastcomet.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.fastcomet.com\/blog\/legacy-php-versions-makes-your-website-vulnerable#primaryimage"},"image":{"@id":"https:\/\/www.fastcomet.com\/blog\/legacy-php-versions-makes-your-website-vulnerable#primaryimage"},"thumbnailUrl":"https:\/\/www.fastcomet.com\/blog\/wp-content\/uploads\/2018\/10\/php-version-update.jpg","datePublished":"2018-10-24T11:44:39+00:00","dateModified":"2022-06-10T06:09:29+00:00","author":{"@id":"https:\/\/www.fastcomet.com\/blog\/#\/schema\/person\/9ef9240ced73eac50f0efa4cfeec79fb"},"description":"Is your site on PHP? \u27a4 You still don't want to use the latest PHP version? \u27a4Think again \u27a4 read more about legacy PHP versions from FastComet.","breadcrumb":{"@id":"https:\/\/www.fastcomet.com\/blog\/legacy-php-versions-makes-your-website-vulnerable#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.fastcomet.com\/blog\/legacy-php-versions-makes-your-website-vulnerable"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.fastcomet.com\/blog\/legacy-php-versions-makes-your-website-vulnerable#primaryimage","url":"https:\/\/www.fastcomet.com\/blog\/wp-content\/uploads\/2018\/10\/php-version-update.jpg","contentUrl":"https:\/\/www.fastcomet.com\/blog\/wp-content\/uploads\/2018\/10\/php-version-update.jpg","width":1024,"height":620},{"@type":"BreadcrumbList","@id":"https:\/\/www.fastcomet.com\/blog\/legacy-php-versions-makes-your-website-vulnerable#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.fastcomet.com\/blog"},{"@type":"ListItem","position":2,"name":"Why Using Legacy PHP Versions Makes Your Website Vulnerable"}]},{"@type":"WebSite","@id":"https:\/\/www.fastcomet.com\/blog\/#website","url":"https:\/\/www.fastcomet.com\/blog\/","name":"FastComet Blog","description":"FastComet Web Hosting Blog","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.fastcomet.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.fastcomet.com\/blog\/#\/schema\/person\/9ef9240ced73eac50f0efa4cfeec79fb","name":"Elena","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.fastcomet.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/1b8cfccf4061aab9b008ad0468984108f59623016631a3aed76c6e837ce2fc05?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/1b8cfccf4061aab9b008ad0468984108f59623016631a3aed76c6e837ce2fc05?s=96&d=mm&r=g","caption":"Elena"},"description":"Elena oversees all Marketing, Product Management and Community efforts for FastComet and is in charge of telling the brand's story. Always pitching, she\u2019ll share the FastComet vision with anyone who\u2019ll listen. Elena helps our customers make the most of their web sites' and focuses on our inbound marketing efforts; everything from developing new online growth strategies, content creation, technical SEO, and outreach within the FastComet community. Her background includes Sales and Customer Relationship development, as well as Online Marketing.","sameAs":["https:\/\/www.fastcomet.com","https:\/\/x.com\/ElenaTileva"],"url":"https:\/\/www.fastcomet.com\/blog\/author\/elenatileva"}]}},"_links":{"self":[{"href":"https:\/\/www.fastcomet.com\/blog\/wp-json\/wp\/v2\/posts\/2508","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.fastcomet.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.fastcomet.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.fastcomet.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.fastcomet.com\/blog\/wp-json\/wp\/v2\/comments?post=2508"}],"version-history":[{"count":18,"href":"https:\/\/www.fastcomet.com\/blog\/wp-json\/wp\/v2\/posts\/2508\/revisions"}],"predecessor-version":[{"id":7855,"href":"https:\/\/www.fastcomet.com\/blog\/wp-json\/wp\/v2\/posts\/2508\/revisions\/7855"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.fastcomet.com\/blog\/wp-json\/wp\/v2\/media\/2517"}],"wp:attachment":[{"href":"https:\/\/www.fastcomet.com\/blog\/wp-json\/wp\/v2\/media?parent=2508"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.fastcomet.com\/blog\/wp-json\/wp\/v2\/categories?post=2508"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.fastcomet.com\/blog\/wp-json\/wp\/v2\/tags?post=2508"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}