Free check · PHP 8.5, 8.4, 8.3, 8.2 supported
Check the PHP versionof any website
Type a site's address. We read the PHP version it reports and tell you whether that version still gets security fixes. Free, no signup.
Dates checked against php.net on 22 Oct 2026
Check a site
PHP versions and their support
Each PHP branch gets two years of bug and security fixes, then two years of security fixes only. After that it reaches end of life and gets no more fixes.
| PHP | Status | Bug fixes until | Security fixes until | Final release |
|---|---|---|---|---|
| 8.5 | Supported | 31 Dec 2027 | 31 Dec 2029 | — |
| 8.4 | Supported | 31 Dec 2026 | 31 Dec 2028 | — |
| 8.3 | Security fixes only | 31 Dec 2025 | 31 Dec 2027 | — |
| 8.2 | Security fixes only | 31 Dec 2024 | 31 Dec 2026 | — |
| 8.1 | End of life | — | Ended 31 Dec 2025 | 8.1.34 |
| 8.0 | End of life | — | Ended 26 Nov 2023 | 8.0.30 |
| 7.4 | End of life | — | Ended 28 Nov 2022 | 7.4.33 |
| 7.3 | End of life | — | Ended 6 Dec 2021 | 7.3.33 |
| 7.2 | End of life | — | Ended 30 Nov 2020 | 7.2.34 |
| 7.1 | End of life | — | Ended 1 Dec 2019 | 7.1.33 |
| 7.0 | End of life | — | Ended 10 Jan 2019 | 7.0.33 |
| 5.6 | End of life | — | Ended 31 Dec 2018 | 5.6.40 |
| 5.5 | End of life | — | Ended 21 Jul 2016 | 5.5.38 |
| 5.4 | End of life | — | Ended 3 Sep 2015 | 5.4.45 |
| 5.3 | End of life | — | Ended 14 Aug 2014 | 5.3.29 |
| 5.2 | End of life | — | Ended 6 Jan 2011 | 5.2.17 |
| 5.1 | End of life | — | Ended 24 Aug 2006 | 5.1.6 |
| 5.0 | End of life | — | Ended 5 Sep 2005 | 5.0.5 |
How this check works
- The check makes one ordinary request to the site's home page from Cloudflare's network and reads the
X-Powered-Byheader. PHP adds that header by default. - The answer is kept for 10 minutes, so checking again doesn't contact the site again.
- We never send attack traffic or exploit code. Our logs keep a hash of the host name, never the address.
- Worried about the October 2026 PHP flaws? The PHP2Shell check also reads php -v output and Docker files.
Questions
How do I check the PHP version of a website?
Type the site's address into the check on this page. It makes one ordinary request to the site's home page and reads the X-Powered-By header, which PHP adds by default. From a terminal, curl -sI https://example.com | grep -i x-powered-by shows the same header.
Why can't the check see my site's PHP version?
Many sites hide it: expose_php is off, a server rule removes the header, or a CDN or security plugin strips it. Check from the inside instead: run php -v on the server, or in WordPress open Tools, then Site Health, then Info, and look under Server.
Which PHP versions are still supported?
As of 22 Oct 2026, PHP 8.5, 8.4, 8.3, 8.2 get security fixes: PHP 8.5 until 31 Dec 2029, PHP 8.4 until 31 Dec 2028, PHP 8.3 until 31 Dec 2027, PHP 8.2 until 31 Dec 2026. Every older branch is past end of life.
What happens when a PHP version reaches end of life?
PHP stops releasing fixes for that branch, including security fixes. Sites on it stay exposed to every flaw found afterwards. Some Linux distributions and hosts backport fixes to their own builds; otherwise, move to a supported branch.
Is PHP 8.1 still supported?
No. PHP 8.1 reached end of life on 31 Dec 2025. Its last release was 8.1.34.
Does this check attack my site?
No. It makes one ordinary request, the same as a browser visiting the home page, and reads the version your server already reports. It never sends exploit code.
Sources
The poster shows the PHP logo by Colin Viebrock, licensed CC BY-SA 4.0, painted into the artwork. PHP is not affiliated with Arvion.