PHP Upgrade Services for New Zealand Websites
Your hosting provider says your PHP version needs updating. It might be a routine notice, or perhaps a recent security warning has prompted the email.
Either way, there's something worth checking before anyone changes the version.
Will the rest of your website still work?
Contact forms, customer logins, payment processing and custom features can all depend on how your application was originally built. An update that looks simple in a hosting dashboard can become complicated when older code or unsupported plugins are involved.
At Flight Digital, we provide PHP upgrade services for New Zealand businesses that need help updating existing websites and applications.
We work with Silverstripe, Craft CMS and custom PHP platforms, reviewing compatibility, updating legacy code and testing important functionality before deployment.
If you're unsure whether your website is ready for a newer PHP version, we can help you work out what needs attention.
What Is PHP?
PHP stands for PHP: Hypertext Preprocessor. It's an open-source programming language used to build websites and web applications.
PHP runs on the server, handling much of the work visitors don't see. When someone submits a contact form, signs into an account or completes an online booking, PHP might be processing that information, retrieving records from a database or communicating with another system.
Content management systems such as WordPress, Silverstripe and Craft CMS also rely on PHP. As new versions are released, certain functions change or become unsupported. This is why a PHP upgrade sometimes requires changes to website code, plugins or server settings.
Does Your Website Need a PHP Version Upgrade?
Each PHP release has a support period. Once that ends, the PHP development team stops providing security fixes for that version.
Hosting providers sometimes maintain older PHP packages with their own security patches, so an older version number doesn't always mean a website is exposed. Still, it's worth knowing exactly what's running and who is responsible for maintaining it.
You should review your PHP setup if:
- Your hosting provider has warned you about an outdated PHP version.
- Your current PHP release is no longer receiving upstream security updates.
- Your CMS requires a newer PHP version.
- A recent vulnerability affects your server's PHP installation.
- Plugins or modules have stopped receiving updates.
- Your website uses older code that's difficult to maintain.
- An attempted PHP update has caused errors or broken functionality.
According to the official PHP support schedule, PHP 8.2 reaches the end of its upstream security support on 31 December 2026. Businesses still using this version should review their applications and plan their next update.
You can usually find your PHP version in your hosting control panel. Some CMS platforms also display this information in their administration area.
If the website is managed by another company, ask them to confirm the PHP version serving the live site and whether that installation receives security updates.
Source: PHP Supported Versions, October 2026.
PHP Usage and Upgrades: What the Numbers Show
69.2% of Websites Use PHP
According to W3Techs PHP Usage Statistics, PHP powers 69.2% of websites where the server-side programming language can be identified.
That includes websites built with popular content management systems, along with custom applications developed for different business requirements.
34.5% of PHP Websites Still Use PHP 7 or Earlier
W3Techs reports that 26.7% of surveyed PHP websites use PHP 7, while another 7.8% use PHP 5 or PHP 4.
Combined, that's 34.5% running PHP versions that no longer receive upstream security updates from the PHP development team.
Some hosting providers and operating system vendors continue supplying their own security patches. Businesses using these older releases should check how their environments are maintained and whether an upgrade is needed.
Source: W3Techs PHP Version Statistics, 26 October 2026.
When Should You Hire a PHP Developer?
Some PHP updates can be handled directly through your hosting provider. Others need someone who understands how the website was built.
Development support becomes particularly useful when older software, custom functionality or undocumented code is involved.
Your Website Has Custom Functionality
A standard website and an application connected to booking systems, payment providers and customer databases have different requirements.
Changing PHP could affect code that was written years ago.
Before upgrading, those connections and any custom functionality need to be checked against the proposed PHP version.
Your CMS or Plugins Are Outdated
An older Silverstripe or Craft CMS installation may rely on modules that don't support newer PHP releases.
The CMS itself might need updating before the PHP upgrade can proceed.
In other cases, individual plugins or dependencies need replacing.
You've Inherited an Older Website
Perhaps the original development agency is no longer involved, or nobody has maintained the application for some time.
There may be limited documentation, unfamiliar code or integrations that aren't immediately obvious.
We can review the existing setup and identify the parts that need attention before making changes.
Your Website Has Started Showing Errors
Sometimes a PHP update has already happened, and the website isn't behaving as expected.
Pages might display warnings, forms may stop submitting, or background processes could fail without producing a visible error.
Our developers can investigate compatibility issues and establish what needs fixing.
What's Included in Our PHP Upgrade Services?
Not every PHP upgrade requires major development work.
A website that's been maintained regularly may only need a relatively simple update. An older application with custom code, unsupported plugins or several integrations can be more complicated.
We check what's running before deciding how to upgrade it.
PHP Version and Hosting Assessment
We start by reviewing your current website setup.
That includes identifying the PHP version, hosting environment, CMS and relevant server dependencies.
We also look at how PHP is managed. Some hosting providers control runtime updates, while other websites use dedicated servers or more complex infrastructure.
For example, a business using managed hosting will have different responsibilities from one running its own server.
Establishing who manages each part of the environment helps us plan the work and coordinate with the right people.
PHP Compatibility Testing
Moving to a newer PHP release can expose problems in applications developed for older versions.
An old plugin might call a function that no longer exists. A custom integration could rely on an outdated library. Even a small change in how PHP handles data can affect application behaviour.
Our compatibility review covers the relevant CMS, modules, custom code, dependencies and important integrations.
We check how these components work together and identify anything that needs attention before the update reaches the live website.
Legacy PHP Code Updates
Older websites sometimes need development work before they can move to a supported PHP version.
For example, an application may still use functions that were removed in PHP 8 or depend on a library that hasn't been maintained for years.
Changing the PHP version alone won't fix those problems.
The affected code may need updating, replacing or refactoring to work with the newer runtime.
This doesn't necessarily mean rebuilding the website. In some cases, the changes are limited to specific parts of the application.
We'll explain what we've found and recommend the work needed to support the target PHP version.
PHP Deployment and Website Testing
A PHP upgrade isn't complete just because the homepage loads.
A website can appear normal while a contact form stops submitting, a checkout fails or an integration no longer transfers data.
Testing needs to cover the functionality your business relies on.
For an ecommerce website, that could mean checking the checkout and payment process. For a membership platform, customer logins and account functions might be more important.
Depending on the hosting environment, the upgrade may involve staging, backups, a scheduled deployment and checks after the update.
We'd rather find a broken integration during testing than discover it after the update has reached your customers.
How Does Flight Digital Manage a PHP Upgrade?
We plan PHP upgrades around the existing website.
For a straightforward project, that might involve checking compatibility, applying the update and testing important functions. Older applications can require more preparation.
Our approach generally follows three stages.
1. Review and Plan
We establish the current PHP environment, CMS, hosting setup and any relevant dependencies.
This is particularly useful for websites that have changed hands between developers or agencies. Important customisations aren't always documented, and some may not be obvious from the frontend.
Once we've reviewed the application, we identify compatibility issues and agree on the work required.
The plan also covers testing, deployment arrangements and any recovery measures needed for the project.
2. Update and Test
The necessary PHP, code and dependency changes are made according to the agreed scope.
Where possible, we test the updated application away from the live website.
This gives us a chance to check important functionality and resolve compatibility errors before deployment.
Testing may include contact forms, customer accounts, third-party integrations and background processes, depending on how the website is used.
3. Deploy and Review
Once testing is complete, the changes can be deployed to the live environment.
We check the PHP version, important website functions and any unexpected server or application errors.
If further issues are identified, we'll explain what needs attention.
You'll have a clearer understanding of what was updated, what was tested and whether anything still requires work.
What Could Go Wrong During a PHP Upgrade?
The problems aren't always obvious.
A website can look perfectly normal while something important has stopped working.
Consider a contact form that displays a successful submission message but no longer sends the enquiry. Or an online store where product pages load correctly, yet the payment process fails.
These are the kinds of issues compatibility testing is intended to catch.
Other problems include:
Deprecated PHP functions: Older code may use functions that have changed or been removed.
Unsupported CMS modules: Plugins and extensions may not work with the target PHP release.
Custom website functionality: Features developed specifically for your business may depend on older PHP behaviour.
Third-party integrations: Payment gateways, CRM connections and external services may need changes or additional testing.
Server configuration: PHP extensions, database drivers and related services must remain compatible.
Background processes: Scheduled imports, reporting functions and automated notifications can fail without affecting the visible website.
A maintained application might need very little adjustment. An older platform can take more investigation, especially when documentation is limited.
PHP Upgrades for Silverstripe, Craft CMS and Custom Websites
Silverstripe PHP Upgrades
Silverstripe websites often include custom modules, integrations and functionality built around specific business requirements.
Those components can depend on both the CMS version and the PHP runtime.
An older Silverstripe installation may need a CMS upgrade before it can use a newer PHP version.
Flight provides Silverstripe development and maintenance services, including support for existing websites, platform upgrades and custom functionality.
When reviewing a Silverstripe PHP upgrade, we check how the CMS, modules and server environment work together.
This helps us determine whether the PHP update can proceed independently or needs to be coordinated with wider changes to the application.
Craft CMS PHP Upgrades
Craft CMS allows businesses to build flexible websites with custom content structures and integrations.
Its PHP requirements depend on the Craft version and the packages used by the application.
For example, an older Craft installation might rely on plugins that don't support the target PHP version. Custom modules and Composer packages can introduce further requirements.
Flight's Craft CMS development services cover custom website development, integrations and ongoing platform requirements.
For existing Craft websites, we'll review the application and its dependencies before recommending a PHP version change.
Custom PHP Websites and Applications
Custom applications can be harder to upgrade when the original development team is no longer involved.
The codebase may contain older libraries, undocumented business logic, scheduled processes or integrations that aren't immediately visible.
For example, an application might collect information during the day and transfer it to another system overnight.
That process needs testing even though customers never see it happening.
Our website development team can review inherited applications, investigate older code and identify what needs updating.
Where an application has significant technical limitations, we can also assess whether targeted improvements are still practical.
PHP Security Updates and the PHP2Shell Vulnerability
Security issues are another reason businesses may need to review their PHP environment.
In October 2026, two critical PHP vulnerabilities, collectively known as PHP2Shell, were disclosed. New Zealand's National Cyber Security Centre has also issued an advisory warning organisations about the vulnerabilities.
They can allow remote code execution on vulnerable installations.
That means a website could be running an updated version of WordPress or another CMS while still relying on a vulnerable PHP installation.
On 21 October 2026, security fixes were released for PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35.
Hosting providers and operating system vendors may also distribute patched PHP packages through their own update systems.
If your hosting provider has already applied and verified the relevant security fix, an additional emergency version upgrade may not be necessary.
However, vulnerable installations should be patched promptly.
It's also important to distinguish between fixing a vulnerability and investigating a possible breach. Applying a patch doesn't remove malicious changes made before the update. Suspected compromises should be assessed by a qualified cybersecurity professional.
Our PHP2Shell vulnerability guide explains which PHP versions are affected, how to check your hosting environment and what to do if an update is required.
Will Upgrading PHP Affect Your Website's SEO?
PHP upgrades don't directly improve your Google rankings.
A newer PHP release may improve server performance, depending on the application and hosting environment. However, that doesn't automatically translate into higher search visibility.
From an SEO perspective, the bigger concern is what happens if an update introduces website problems.
Imagine an important service page starts returning a 500 server error after deployment. Visitors can't access it, and Google may encounter the same problem when crawling the website.
Broken templates, unexpected redirects and inaccessible content can also affect indexing.
For websites that rely on organic search, we recommend checking:
- HTTP status codes on important pages
- Website availability and server errors
- Existing redirects and canonical tags
- Indexing directives
- XML sitemap accessibility
- Important page templates and content
- Contact forms and conversion functionality
- Google Search Console crawl and indexing reports
These checks help identify whether the update has changed how visitors or search engines access the website.
Flight's technical SEO services can support investigations into crawling, indexing and organic visibility following website changes.
For larger projects, involving SEO during development and deployment planning can help avoid unnecessary problems.
Should You Upgrade PHP or Rebuild Your Website?
An outdated PHP version doesn't necessarily mean your website needs replacing.
If the CMS is supported, the application is maintainable and its dependencies can be updated, upgrading the existing system may be the most practical option.
But sometimes a PHP warning reveals a bigger problem.
Perhaps the CMS is no longer supported, critical dependencies can't be upgraded or custom functionality has become difficult to maintain.
You might also be paying to keep an application running when it no longer meets the business's needs.
In those situations, a PHP upgrade could resolve the immediate issue while leaving other technical problems untouched.
We look at the condition of the codebase, the dependencies involved and the work required to keep the platform maintained.
If targeted development is sufficient, we'll recommend that approach.
Where the application needs more substantial attention, we can help assess whether a wider website development project or CMS migration makes sense.
Replacing a website is a significant investment. There should be a clear reason for doing it.
How Much Does a PHP Version Upgrade Cost?
There isn't a standard price that applies to every PHP upgrade.
A maintained website with compatible software may only need a compatibility review, an update and testing.
An older application with custom code, unsupported modules or several integrations can require more work.
For example, a business might need several libraries replaced or parts of its application updated before the new PHP version can be deployed.
Hosting arrangements also make a difference.
A website running on managed hosting has different requirements from one using a dedicated server and custom deployment process.
Before providing an estimate, we'll need to understand:
- Your current PHP version and target release
- The CMS or framework your website uses
- The condition of any custom code
- Plugins and third-party dependencies
- Hosting and server requirements
- Compatibility testing
- Deployment and recovery planning
Changing a PHP setting in a hosting dashboard isn't the same as updating an application that can no longer run correctly on the newer version.
If you've received a PHP upgrade warning, send it through with your website URL.
That gives us a useful starting point for discussing what needs checking and whether development work is likely to be required.
Why Choose Flight Digital for PHP Upgrades?
Flight Digital is an Auckland-based digital agency working with organisations across New Zealand, Australia and the UK.
Our development work includes Silverstripe, Craft CMS, custom applications, integrations and improvements to existing digital platforms.
We've also worked with organisations that need to make decisions about older technology, including whether to maintain what they have or move to a different platform.
Experience With Existing and Custom Platforms
Taking over an existing website can be complicated.
The original developers may have left, documentation might be incomplete, and the application could contain years of custom changes.
Our experience with existing CMS platforms and custom applications helps when reviewing websites that have been handed between development teams.
For PHP upgrades, we check the application code, CMS dependencies and hosting setup before recommending changes.
Experience With Complex Digital Platforms
Our work with Active Adventures is an example of how we approach decisions about existing technology.
The group operates travel brands across several international markets. Its legacy Silverstripe platform had accumulated technical debt that was affecting performance, integrations and the ability to respond to changing business requirements.
Flight assessed the existing platform and recommended moving to a headless Sanity architecture.
The project involved rebuilding the digital ecosystem and connecting booking platforms, CRM tools and marketing systems.
This was a wider replatforming project rather than a standalone PHP upgrade. It demonstrates our experience assessing older applications, working through technical dependencies and making platform decisions based on what the business needs.
Explore the Active Adventures project
Development and SEO Working Together
PHP upgrades are primarily development projects, but website changes can affect other parts of the business.
An integration failure could interrupt enquiries. A broken template might affect how customers use the website. Server errors can also create SEO problems if important pages become inaccessible.
Flight has development, UX and technical SEO expertise within the wider team.
When these areas are relevant to a project, we can involve the appropriate specialists rather than treating every issue separately.
We can also work alongside your hosting provider or internal IT team if they're responsible for managing the server.
Need Help With Your PHP Upgrade?
If your website is using an outdated PHP version, or your hosting provider has flagged an update that you're unsure how to handle, get in touch.
Tell us about your website, the platform you're using and any warnings or compatibility issues you've encountered.
You don't need to have every technical detail ready. Your website URL and information from your hosting provider are a good starting point.
We'll discuss what's involved and whether your website needs a straightforward update or a more detailed technical review.
Frequently Asked Questions About PHP Upgrades
01
Yes, many PHP upgrades can be completed without causing problems, particularly when the website uses supported software and compatible dependencies. However, newer PHP versions can affect older code, plugins and integrations. Testing the application before deployment helps identify issues and reduce the risk of unexpected failures.
02
Your website should run a supported PHP version that's compatible with its CMS, dependencies and hosting environment. The latest version isn't necessarily the right choice if important parts of the application don't yet support it. As of October 2026, PHP 8.4 and 8.5 are in active upstream support, while PHP 8.2 and 8.3 receive security support only. The appropriate version should be selected after checking the application's requirements and the current PHP release schedule.
03
In many cases, yes. However, upgrading from PHP 7 to PHP 8 may require changes to older functions, libraries and application code. The amount of work depends on how the website was developed and maintained. A technical review can identify which changes are necessary before the upgrade can proceed.
04
No. PHP is the programming language runtime used by the server. WordPress, Silverstripe, Craft CMS and other platforms are applications that run using PHP. Updating a CMS doesn't automatically update the PHP runtime, and upgrading PHP doesn't necessarily update the CMS. Both need to be considered when managing website compatibility and security.
05
Sometimes. Some hosting environments allow updates with little visible interruption. Others require a maintenance window, particularly when services need restarting or application changes are involved. The approach depends on the hosting setup and complexity of the website.
06
It depends on the amount of work involved. A routine update on a maintained website may be relatively straightforward. A legacy application with unsupported dependencies or substantial custom code can take longer. Compatibility testing, development changes and deployment requirements all affect the timeframe. The website needs to be assessed before a meaningful estimate can be provided.
07
It can, depending on the PHP version, application code and hosting configuration. Newer PHP releases may offer performance improvements, but the results vary between applications. Website speed also depends on factors such as caching, database performance, frontend resources and server infrastructure.
08
No. A website using a vulnerable PHP installation may be exposed to an attack, but that doesn't prove someone has gained access. The appropriate security update should be applied and verified. If there's evidence of suspicious activity, a qualified cybersecurity specialist should investigate whether the environment has been compromised.
09
Not always. If your provider has installed the required patch and confirmed the website works correctly, additional development may not be necessary. Development support becomes useful when the update causes compatibility problems, requires code changes or forms part of a larger application upgrade.
