All geek questions in one place

Should I ask my web host to use PHP Version 5.3.5 on my VPS

The situation:. My current web hosting gave me a new VPS today with PHP 5.2.9 (released: February 2009).

What I did : I asked my website to update it to the latest PHP 5.3.5 so that I could fix all the security vulnerabilities.

Web site response : No, it should not. Your PHP scripts will be broken. Instead, you can use PHP 5.2.17.

My question is . Should I get my website to install PHP 5.3.5 on my VPS? What problem can I get by updating. I currently do not use any PHP 5.3 features, but I can use them in the future. My main task is to completely protect myself from known vulnerabilities.

Please do not close this question. It is not directly related to programming, but is associated with PHP, which, it seems to me, can only be answered by PHP experts in SO.

+4
source share
3 answers

Ok, just install PHP 5.3.5 locally and see if any of your scripts break. If everything is ok, let them install PHP 5.3.

Regarding "This will break things": PHP is usually compatible with feedback. This may give you some E_STRICT errors, but they do not break scripts. But really, you should just try;)

+3
source

An old release date does not mean that it has vulnerabilities. For example, most Linux distributions keep the same version of PHP forever (for the duration of the distribution), but they fix vulnerabilities as they are discovered.

Just make sure all of your distribution packages are up to date.

+1
source

If you have VPS, do you have root access? If so, you can upgrade yourself. I guess this is possible with a little work on installing both versions.

+1
source

Source: https://habr.com/ru/post/1336593/

More articles:


All Articles