Posts

PHP EOL Information

Some important information about upcoming changes in the support of PHP by the PHP developers; we like to inform you beforehand on what changes you may make now to make sure your site keeps working properly and secure after December 2018

Version PHP 5.6.x as well as PHP 7.0.x will both be EOL (End of Life) as from December 2018 as from that time no updates will be done by the PHP developers on these versions, not even security updates. So make sure you update your PHP EOL version as soon as possible.

PHP EOL List

You should upgrade to PHP 7.2.x as soon as possible, if you use the latest versions of WordPress, Joomla or Drupal you should be able to upgrade without issues, if you use any other scripts you should check with your developer(s) if they are ready for PHP 7.2.x

Note that PHP 7.2.x is also much faster as i.e. PHP 5.6 so also from having your scripts run as fast as possible its a good thing to use the latest version.

But what if you really can’t change the PHP version, do not worry immediately, here at 040Hosting we also provide Hardened PHP, Hardened PHP is a component that ensures your web server security by patching all PHP versions against known vulnerabilities, allowing you to run any version of PHP without having to update programs to accommodate newer versions. Which is part of the protective shields we implemented through Imunify360. We would still advise to look for upgrading as soon as possible as this will not be for ever but rather as a temporary workaround, besides you would want your scripts run as fast as possible.

You can change your PHP version in cPanel, go to cPanel -> Software -> Select PHP version -> PHP 7.2

also to use older versions of PHP we advise to use the Select PHP Version button under software and choose the older version from there; these are the Hardened PHP versions as part of Cloudlinux/Imunify360
you can also choose versions through the MultiPHP Manager but these versions are provided by cPanel and NOT the Hardened secured versions.

If you have trouble or need assistance please contact our support department and we are glad to assist you with updating your PHP version.

 

PHP Updates for non CloudLinux systems by cPanel

Removal of PHP 5.4 and PHP 5.5 in EasyApache Profiles

The week of June 18th cPanel will be removing PHP version 5.4 and 5.5 from all cPanel-provided EasyApache 4 profiles. To help users understand what to do, and how to react when that change occurs, cPanel did put together a quick list of questions that they think will frequently be asked. Read the article from cPanel here: https://blog.cpanel.com/removal-of-php-5-4-and-php-5-5-in-easyapache-profiles/

Note for our Shared Hosting, Reseller Hosting and Elastic Site Hosting customers: 

We utilize CloudLinux on all our servers which uses their own PHP system, our servers will remain to offer PHP 5.4 and PHP 5.5 through CloudLinux as long they keep supporting these versions.

Note for our Managed Dedicated Hosting Customers:

If you use Cloudlinux, your servers will remain to offer PHP 5.4 and PHP 5.5 through CloudLinux as long they keep supporting these versions.

If you use CentOS, your server will stop supporting the above mentioned versions as described in cPanels article. If you need PHP 5.4 of PHP 5.5 in your environment you may contact our sales department so we can see if an upgrade of your server to CloudLinux is possible for you.

PHP Version Selection & Hardened PHP

Most of our clients already know for a long time they could select the PHP version of their choice, we always have warned those clients that the best course of action is to upgrade to a supported version, and that advise stays the same. But for those who have no other choice as using the old version for whatever reason, we now have now HardenedPHP on all Cloudlinux servers.

Hardened PHP is a feature of CloudLinux OS that secures old and unsupported versions of PHP. In those old versions, including widely used 5.2, 5.3, and, as of September 14th, 2015 also 5.4, vulnerabilities, even if discovered, are not patched by the PHP.net community.

About 85% of all PHP sites use highly popular PHP versions like PHP 5.2, 5.3, and 5.4. Yet, versions 5.2 & 5.3 and, as of 9/14/2015 also version 5.4, are unsupported by the PHP.net community.

Web developers write their scripts to accommodate for a particular PHP version, but just because a version becomes obsolete, companies are not able to update and change programs to accommodate for newer versions.

HardenedPHP patches old PHP versions so that you do not have to force your customers to re-write scripts written for an older PHP version or, even worse, risk breaking their sites.

One important note, HardenedPHP does not make your insecure website secure ! there is no magic which can fix a security issue within the PHP script itself; HardenedPHP only fixes known security issues within the PHP code itself; not the scripts.

Over 100 vulnerabilities, of which many were critical, have been discovered for the unsupported versions of PHP and all have been patched by CloudLinux.