Poster of a procession of riveted steel elephants: a new one with the PHP logo painted on its flank leads, older ones follow, and a robot crane takes the oldest apart under a large clock. A sign on the wall reads Arvion.

PHP 7.4end of life

PHP 7.4 reached end of life on 28 Nov 2022. Its final release is 7.4.33, and it gets no more security fixes.

End of life

PHP 7.4 at a glance · status on , from php.net

First release
28 Nov 2019
End of life
28 Nov 2022
Final release
7.4.33 · 3 Nov 2022

PHP2Shell

PHP released no PHP2Shell update for 7.4. Its security team published minimal source patches for 7.4, 8.0 and 8.1 for people who build PHP themselves, and some Linux distributions and LTS vendors ship backported fixes. Check yours

Which PHP does a site run?

Type its address and see its version and support dates.

Check a site

Moving off PHP 7.4

  1. 01

    WordPress on shared hosting

    In your host's control panel, switch the site to PHP 8.5 or 8.4. In cPanel this is MultiPHP Manager. Then open Tools, then Site Health, then Info in WordPress and check the PHP version under Server.

  2. 02

    Docker

    Change the image tag from PHP 7.4 to PHP 8.5 or 8.4, for example wordpress:php8.5-fpm or php:8.5-fpm. With your own Dockerfile, rebuild with docker compose build --pull, then restart.

  3. 03

    A Linux server

    Install PHP 8.5 from your distribution or a PHP repository and point the web server at it. Distributions that still ship PHP 7.4 may backport fixes; their security notices are the reference.

Questions

Is PHP 7.4 still supported?

No. PHP 7.4 reached end of life on 28 Nov 2022. Its final release was 7.4.33, on 3 Nov 2022. PHP releases no more security fixes for it.

What should I upgrade PHP 7.4 to?

A supported branch: PHP 8.5, 8.4, 8.3, 8.2. PHP 8.5 gets security fixes the longest, until 31 Dec 2029. Test your application and its extensions on the new branch before you switch production.

Is PHP 7.4 affected by PHP2Shell?

PHP released no PHP2Shell update for 7.4. Its security team published minimal source patches for 7.4, 8.0 and 8.1 for people who build PHP themselves, and some Linux distributions and LTS vendors ship backported fixes.

How do I check which PHP version a site runs?

Type its address into Arvion's PHP version check. It reads the X-Powered-By header PHP adds by default. If a site hides it, run php -v on the server, or in WordPress open Tools, then Site Health, then Info, and look under Server.

Other PHP versions

Supported now: PHP 8.5, 8.4, 8.3, 8.2.

Sources

The poster shows the PHP logo by Colin Viebrock, licensed CC BY-SA 4.0, painted into the artwork. PHP is not affiliated with Arvion.

Is PHP spread across your repositories?

Your repositories pin PHP in Dockerfiles, compose files, CI images and composer.json. Book a few minutes with the Arvion team to go through them.

Book a few minutes