What you should know about PHP Extended Support

The widely used server-side scripting language PHP is a fundamental building block of many web applications and websites. Because of its extensive use, ongoing support is essential to ensure security and efficiency. This article examines the concept of PHP Extended Support, an initiative by hosting providers that aims to maintain this support even after the regular product lifecycle has ended.

What does Extended Support mean?

“Extended Support” is an extended maintenance and support service offered by software vendors after the end of regular support. It can include bug fixes, security updates and other services, thereby ensuring longer-term security and efficiency for users. For companies and organisations that depend on particular software, Extended Support is an important security measure and provides relief, as it allows them to keep their systems up to date without being forced into immediate updates or system migrations.

Why Extended Support for PHP?

The need for Extended Support for PHP arises from several factors. These include the widespread use of PHP, the general risks associated with running outdated software, and the requirement for ongoing maintenance of legacy PHP versions.

Usage and dependence on PHP in today's technology landscape

PHP is one of the most widely used server-side scripting languages for web development and powers a significant portion of the internet. Numerous popular content management systems such as WordPress, Drupal and Joomla are built on PHP. In addition, many custom web applications, including some large web services and social networks, use the scripting language. Given the extensive use of PHP, continued support for this scripting language is crucial to ensure the functionality of these systems.

Risks of using outdated software

As technology advances, so do the threats and vulnerabilities to which software is exposed. Outdated software that no longer receives regular updates and patches can become an easily exploitable entry point for cyber-attacks. In this context, Extended Support for PHP is central to providing security patches that prevent the exploitation of vulnerabilities.

Need for continuous maintenance of outdated PHP versions

Like any other software, PHP is not entirely free of flaws. Continuous maintenance through Extended Support can help improve the efficiency, performance and security of outdated PHP versions. While updating to a newer PHP version would be ideal, Extended Support can be a viable solution in situations where an update is not possible due to compatibility issues or resource constraints.

Overall, Extended Support for PHP gives users additional breathing space and a security measure by ensuring that they can continue to operate securely and efficiently even while using an older version of PHP. This support is essential to strengthen users' confidence in the longevity and reliability of PHP-based systems.

What does PHP Extended Support include?

PHP Extended Support provides a range of services and measures to ensure the ongoing security, efficiency and performance of PHP-based systems. Exact services can vary from provider to provider, but in general PHP Extended Support includes:

• Security patches and updates: One of the main functions of Extended Support is the provision of security updates and patches. These are designed to address known security vulnerabilities and weaknesses in the PHP software to protect systems against potential cyber-attacks.

• Bug fixes: PHP Extended Support also includes the regular provision of bug fixes intended to correct known bugs and issues in the PHP software. These fixes can help improve the overall reliability and stability of PHP-based systems.

• Compatibility updates: Another important aspect of PHP Extended Support is compatibility updates. These are aimed at ensuring PHP's interoperability with other systems, applications and technologies. This is particularly important because the technology landscape is constantly evolving and it is crucial that older PHP versions continue to interact effectively with newer technologies.

• Technical support: Extended Support often also includes technical support provided by experts. This can take the form of consultancy, assistance with technical issues or help with implementing updates and patches.

PHP Extended Support is generally fee-based and the exact costs and services can vary depending on the provider and the specific support contract. It is recommended to carefully review the different available options to find a solution that best meets the particular requirements and resources of each website owner.

Difference between Normal and Extended Support

The distinction between Normal and Extended Support in relation to software solutions, including PHP, is based on various factors, including time-related differences, the type of updates provided and cost aspects.

The main difference between Normal and Extended Support lies in the phase of the software lifecycle in which they are provided. Normal support is typically offered during the active lifetime of a software version, while Extended Support begins after the end of the normal support period. The exact length of the normal and extended support phases can vary depending on the software vendor and product.

During the normal support period both feature updates and security updates are generally provided. Feature updates can include new functions and improvements, while security updates serve to remedy known security vulnerabilities and weaknesses. In contrast, Extended Support typically focuses mainly on security updates, although some critical bug fixes may also be provided.

Normal support is usually included in the licence fee for the software (for open-source software such as PHP it may also be completely free of charge), whereas Extended Support often incurs additional costs. This is because Extended Support is intended to enable the continued support and maintenance of a software version after it has officially reached the end of its life cycle. The exact cost for Extended Support can vary depending on the provider and the specific support agreement.

PHP versions and their support lifecycles

Like many other software products, PHP follows a predefined lifecycle for each of its major versions. This lifecycle includes various phases, from initial development and release through active support to end of life.

Below is an overview of the typical phases and the associated support for PHP versions:

• Active development and initial release: During this phase the new version is developed, tested and finally released. The newly released current PHP version receives regular updates, including both feature updates and security patches.

• Active support: After the initial release the version enters the active support phase. In this phase regular updates continue to be provided, including both feature updates and security patches. Active support for PHP versions typically lasts two years from the date of the initial release.

• Security support: After active support ends the version enters the security support phase. In this phase no new features are added, but security patches continue to be provided to fix known vulnerabilities and weaknesses. Security support for PHP versions typically lasts one year, i.e. a total of three years of support after the initial release.

• End of lifecycle: After security support ends the version officially reaches the end of its lifecycle. From that point no official updates or patches are provided, and using the version is considered potentially insecure. At this stage it is recommended to upgrade to a newer supported version of PHP.

Some hosting providers offer additional Extended Support after the end of security support, extending beyond the official end of the lifecycle.

Which hosting providers offer PHP Extended Support?

Some hosting providers on the German market offer PHP Extended Support as an additional paid service. These include, among others, IONOS, Strato and DomainFactory. The availability and scope of Extended Support can vary by provider. The specific costs also depend on the PHP version to be maintained. Older versions typically incur higher costs than newer versions. If you want to use PHP Extended Support, you should contact your hosting provider directly to obtain further information about the associated costs and terms.

Is PHP Extended Support worthwhile?

Although the ideal path for software is usually to upgrade to the latest supported version, there are scenarios where PHP Extended Support can be a valuable and sometimes necessary option. In the following situations, PHP Extended Support can be worthwhile:

Complex legacy systems

In some cases, organisations may operate large, complex PHP-based systems that are bespoke or built on older PHP versions. Upgrading to a newer PHP version can in these cases be time-consuming, costly and risky, as it can lead to incompatibilities and disruption to operations. In such situations, PHP Extended Support can provide a valuable stopgap by ensuring continued operation and security of the system while an upgrade plan is developed and implemented.

Limited resources

Updating software to a newer version often requires significant resources, including time, money and technical expertise. For smaller companies or organisations that do not have these resources available, PHP Extended Support can be a more efficient and cost-effective solution that allows them to run their existing systems safely and effectively.

Compliance and regulatory requirements

In certain industries or contexts, strict compliance and regulatory requirements can make a rapid move to a newer software version difficult. In such cases, PHP Extended Support can play an important role by ensuring continued compliance and security of the systems while the requirements for an upgrade are met.

It is important to note, however, that PHP Extended Support—while it can be a valuable service—is not a permanent solution for running outdated software. In the long term, website operators should have a plan to update their systems to a currently supported PHP version or another suitable technology to ensure the security, efficiency and future viability of their online project.

Conclusion

If you run only a simple website or use a user-friendly CMS such as WordPress and keep it and all its extensions fully up to date, you can typically use the latest PHP versions without issue and therefore do not require PHP Extended Support. For more complex web projects or when using certain software solutions — for example some versions of online shop systems like Magento or Prestashop — which only support older PHP versions, PHP Extended Support can be useful as long as your website has not yet been updated to more recent software.

Our article is based on our own experience and research as well as information from external sources.

Sources & further links on the topic:

https://www.php.net/releases/index.php (Official information on the release of the various PHP versions)