What you should know about PHP Extended Support

The widely used server-side scripting language PHP is a fundamental component of numerous web applications and websites. Due to its extensive use, continuous support is essential to ensure security and efficiency. This article sheds light on the concept of PHP Extended Support, an initiative by hosting providers aimed at ensuring this support even after the regular product lifecycle.

What does Extended Support mean?

Extended Support provides an extended maintenance and support service that software manufacturers offer after the regular support period ends. This may include bug fixes, security updates, and other services, ensuring long-term security and efficiency for users. Extended Support is particularly important for businesses and organisations dependent on specific software, providing a crucial security measure and relief as they can keep their systems up to date without being forced into immediate updates or system changes.

Why Extended Support for PHP?

The need for Extended Support for PHP arises from several aspects. These include the widespread use of PHP, the general risks associated with using outdated software, and the need for continuous maintenance of outdated PHP versions.

Usage and Dependency on PHP in Today's Technology Landscape

PHP is one of the most widely used server-side scripting languages for web development and powers a significant portion of the internet. Numerous popular Content Management Systems such as WordPress, Drupal, and Joomla are based on PHP. Additionally, many custom web applications, including some major web services and social networks, also utilise the scripting language. Given the extensive use of PHP, ongoing support for this scripting language is crucial to ensure the functionality of these systems.

Risks of Using Outdated Software

As technology advances, so do the threats and vulnerabilities that software faces. Outdated software that no longer receives regular updates and patches can become a vulnerable entry point for cyber attacks. In this context, Extended Support for PHP is essential to provide security patches that prevent the exploitation of security vulnerabilities.

Need for Continuous Maintenance of Outdated PHP Versions

Like any other software, PHP is not without flaws. Continuous maintenance through Extended Support can help improve the efficiency, performance, and security of outdated PHP versions. While updating to a newer PHP version is ideal, Extended Support can be a viable solution in situations where an update is not possible due to compatibility issues or resource constraints.

Overall, Extended Support for PHP provides users with additional flexibility and a security measure by ensuring that they can continue to work safely and efficiently even when using an older version of PHP. This support is crucial for strengthening users' trust in the longevity and reliability of PHP-based systems.

What Does PHP Extended Support Include?

PHP Extended Support offers a range of services and measures to ensure the ongoing security, efficiency, and performance of PHP-based systems. The exact services may vary from provider to provider, but generally, PHP Extended Support includes:

• Security Patches and Updates: One of the main functions of Extended Support is to provide security updates and patches. These are designed to fix known security vulnerabilities in PHP software to protect systems against potential cyber attacks.

• Bug Fixes: PHP Extended Support also includes regular bug fixes to address known bugs and issues in PHP software. These bug fixes can help improve the overall reliability and stability of PHP-based systems.

• Compatibility Updates: Another important aspect of PHP Extended Support is compatibility updates. These updates are aimed at ensuring the interoperability of PHP with other systems, applications, and technologies. This is particularly important as the technology landscape is constantly evolving, and it is crucial that older PHP versions can still effectively interact with newer technologies.

• Technical Support: Extended Support often includes technical support provided by experts. This can come in the form of advice, assistance with technical issues, or support with the implementation of updates and patches.

PHP Extended Support is usually a paid service, and the exact costs and services may vary depending on the provider and specific support contract. It is recommended to carefully review the various options available to find a solution that best meets the specific requirements and resources of each website operator.

Difference Between Normal and Extended Support

The distinction between Normal and Extended Support for software solutions, including PHP, is based on various factors, including timing differences, the type of updates provided, and cost aspects.

The main difference between Normal and Extended Support lies in the phase of the software lifecycle in which they are provided. Normal support is typically provided during the active lifespan of a software version, while Extended Support begins after the end of the normal support period. The exact length of the normal and extended support phases may vary depending on the software vendor and product.

During the normal support period, both feature updates and security updates are usually provided. Feature updates may include new functionalities and improvements, while security updates aim to fix known security vulnerabilities and weaknesses. In contrast, Extended Support typically focuses mainly on security updates, although some critical bug fixes may also be provided.

Normal support is typically included in the software license fee (completely free for open-source software like PHP), while Extended Support often incurs additional costs. This is because Extended Support is intended to enable continued support and maintenance of a software version after it has officially reached the end of its lifecycle. The exact costs for Extended Support may vary depending on the provider and specific support contract.

PHP Versions and Their Support Lifecycles

Like many other software products, PHP also follows a predefined lifecycle for each of its major versions. This lifecycle includes various phases, from initial development and release through active support to end of life.

Below is an overview of the typical phases and associated support for PHP versions:

• Active Development and Initial Release: During this phase, the new version is developed, tested, and eventually released. The newly released current PHP version receives regular updates, including both feature updates and security patches.

• Active Support: After the initial release, the version enters the phase of active support. During this phase, regular updates will continue to be provided, including both feature updates and security patches. Active support for PHP versions typically lasts for two years from the date of the initial release.

• Security Support: After the end of active support, the version transitions into the security support phase. In this phase, no new features are added, but security patches are still provided to address known security vulnerabilities and issues. Security support for PHP versions usually lasts for one year, totalling three years of support after the initial release.

• End of Life: After the end of security support, the version officially reaches the end of its lifecycle. At this point, no official updates or patches will be provided, and using the version is considered potentially insecure. It is recommended to upgrade to a newer supported version of PHP at this stage.

Some web hosts offer additional Extended Support after the end of security support, which goes beyond the official end of life cycle.

Which web hosts offer PHP Extended Support?

Some hosting providers in the German market offer PHP Extended Support as an additional paid service. These include IONOS, Strato, and DomainFactory. However, the availability and scope of Extended Support may vary depending on the provider. The specific costs also depend on the PHP version being maintained. Older versions may incur higher costs compared to newer versions. Those interested in PHP Extended Support should contact their hosting provider directly for more information on associated costs and conditions.

Is PHP Extended Support Worth It?

While the ideal path for software usually involves upgrading to the latest supported version, there are scenarios where Extended Support for PHP can be a valuable and sometimes necessary option. PHP Extended Support may be worthwhile in the following situations:

Complex Legacy Systems

In some cases, companies may operate large, complex PHP-based systems that are customised or based on older PHP versions. Upgrading to a newer PHP version in such cases can be time-consuming, costly, and risky, as it can lead to incompatibilities and operational disruptions. In such situations, PHP Extended Support can provide a valuable bridging solution by ensuring the continued operation and security of the system while an upgrade plan is developed and implemented.

Limited Resources

Updating software to a newer version often requires significant resources, including time, money, and technical expertise. For small businesses or organisations that do not have these resources available, PHP Extended Support can offer a more efficient and cost-effective solution, allowing them to operate their existing systems securely and effectively.

Compliance and Regulatory Requirements

In certain industries or contexts, strict compliance and regulatory requirements can make the swift transition to a newer software version challenging. In such cases, PHP Extended Support can play an important role by ensuring the continued compliance and security of systems while meeting the requirements for an upgrade.

However, it is important to note that while PHP Extended Support can be a valuable service, it is not a permanent solution for using outdated software. In the long term, website owners should have a plan to update their systems to a currently supported PHP version or another suitable technology to ensure the security, efficiency, and future viability of their online project.

Conclusion

For those running a simple website or using a user-friendly CMS like WordPress and keeping it and all extensions up to date, they can usually easily use the latest PHP versions and therefore do not need PHP Extended Support. For more complex web projects or the use of certain software solutions such as some versions of online shop systems like Magento or Prestashop that only support older PHP versions, PHP Extended Support can be useful as long as their website has not yet been updated to newer software solutions.

Our article is based on our own experiences and research, as well as information from external sources.

Sources & further links on the topic:

https://www.php.net/releases/index.php (Official information on the release of various PHP versions)

Image Credit:
StockSnap on Pixabay