Keep Legacy PHP Secure with Extended Lifecycle Support in Plesk

Upgrading PHP on existing websites isn’t always straightforward. The benefits must be weighed against the risks and expenses of legacy applications, custom code, and third-party integrations. However, running end-of-life PHP versions without security patches exposes your environments to serious risks, with hundreds of unpatched vulnerabilities prevalent in old PHP versions – dozens of which are critical.  

That’s where Extended Lifecycle Support (ELS) for PHP comes in. 

Through our partnership with TuxCare, Plesk offers ELS for PHP, giving you extended security coverage for legacy PHP versions without forcing immediate migrations or major code rewrites.  

The Risks of Running Unprotected End-of-Life PHP 

When PHP versions reach End-of-Life (EoL), they stop receiving official security updates. This leaves websites exposed to: 

  • Threats from security attacks.
  • Compliance issues during security audits.
  • Increased operational risk. 
  • Emergency migration pressure.
  • Rushed code rewrites.

For many hosting providers, agencies, and IT teams, upgrading immediately isn’t always possible as complex applications may need extensive testing and redevelopment. ELS offers a safer alternative. 

What Is TuxCare Extended Lifecycle Support for PHP? 

The extension helps administrators to migrate sites running EoL Plesk PHP versions to TuxCare-secured PHP versions. It automates the migration, preserves all PHP extensions and settings, and provides ongoing security updates for legacy PHP versions. 

Why it matters:  

  • Extended security for legacy PHP: Ongoing patches protect EoL PHP versions from vulnerabilities.
  • Reduced risk, on your schedule: Preserve PHP settings and handlers while switching sites individually or in bulk.
  • Minimal downtime: Automated installation and configuration ensure a smooth transition.
  • Cost-effective: Avoid emergency migrations and expensive code rewrites.

ELS gives you enterprise-grade security for legacy PHP versions without the stress of immediate migrations. 

How it works: 

Once installed, the extension: 

  • Detects all end-of-life PHP versions on your server.
  • Displays how many sites use each version.
  • Installs extended support TuxCare ELS PHP packages.
  • Migrates sites to TuxCare-secured versions (shown as X.Y.Z (Secured) in Plesk).
  • Preserves PHP configuration and handler settings.
  • Allows rollback to the original Plesk PHP version if needed.

This means extended security coverage for legacy PHP versions, without disrupting your environment. 

Getting Started is Easy 

The extension is available to install via the Plesk Extensions Catalog. 

  • Add your TuxCare ELS PHP license key.
  • Navigate to Extensions, then TuxCare Extended Lifecycle Support for PHP.
  • Review detected EoL PHP versions and affected sites.
  • Use the Install & Switch buttons to migrate.

Visit the Plesk documentation on Securing Outdated PHP Versions for more info.  

Supported Environments 

  • Operating Systems: CentOS 7, RHEL/AlmaLinux 8-10, Debian 10-13, Ubuntu 18.04-24.04 (x86-64 only). 
  • PHP Versions: 5.6, 7.0, 7.1, 7.2, 7.3, 7.4, 8.0, 8.1 (EoL).
  • Requirements: Plesk 18.0.72+, TuxCare ELS PHP license, administrator access.

Protect Your Sites Without the Stress 

With TuxCare ELS for PHP in Plesk, you don’t have to choose between security and stability. Protect your legacy PHP sites with ongoing updates, preserve your existing configurations, and manage migrations on your schedule, all with minimal downtime.  

Secure your environment and keep your websites running smoothly, no matter the PHP version. 

No comment yet, add your voice below!

GET LATEST NEWS AND TIPS

  • Yes, please, I agree to receiving my personal Plesk Newsletter! WebPros International GmbH and other WebPros group companies may store and process the data I provide for the purpose of delivering the newsletter according to the WebPros Privacy Policy. In order to tailor its offerings to me, Plesk may further use additional information like usage and behavior data (Profiling). I can unsubscribe from the newsletter at any time by sending an email to [email protected] or use the unsubscribe link in any of the newsletters.

  • This field is hidden when viewing the form
  • This field is hidden when viewing the form
  • This field is hidden when viewing the form
  • This field is hidden when viewing the form
  • This field is hidden when viewing the form
  • This field is hidden when viewing the form