PHP Framework Security Updates
CodeIgniter, CakePHP, Yii and Laminas/Zend frameworks have bespoke dependency surfaces. When PHP updates land, framework compatibility must be tested and patched to keep the stack functional.
Framework compatibility · Dependency audit · Version upgrade from £4,999
Dependency Audit Before Upgrade
We run a dependency audit against your current composer.json / vendor to surface incompatibilities before any change is made.
Framework Compatibility Testing
We test your framework-specific files and configuration on a staging copy of the new PHP version.
Repair of Up to 5 Broken Items
Broken plugins, themes or framework code items are repaired as part of the £4,999 upgrade; additional items are £95 each, agreed before the work.
What's Included
Common Scenarios
Framework Version Incompatibility
Your CodeIgniter / CakePHP / Yii / Laminas app runs on a deprecated PHP version and needs a framework-compatible upgrade.
Third-party Composer Packages Incompatible
A framework upgrade breaks a composer package; we identify the conflict and patch or replace it.
Security-Critical PHP Update
A CVE hits your framework stack; we test the upgrade on staging, repair incompatibilities, and ship a stable new PHP version.
How a Framework PHP Upgrade Runs
£149 Check and Dependency Audit
The check confirms your PHP version and exposure. On top of that we audit composer.json and the vendor directory, producing a list of every package pinned against the old PHP — including transitive dependencies you didn't know were there.
Staging Replica
We clone the app onto a staging environment running the target PHP version. Configuration differences (php.ini, extensions, OPcache) are matched to production so the test means something.
Upgrade and Repair
PHP is moved to the fixed or supported release, the framework is stepped to a compatible version, and up to 5 broken items are repaired in scope. Deprecated-function warnings found in logs are treated as defects, not noise.
Verify and Hand Over
Critical routes are smoke-tested, error logs reviewed, and the production switch is scheduled in a low-traffic window with a tested rollback. You get a written summary of every change and any remaining risk.
Pricing
Transparent, scope-based pricing. Every job includes a backup, a staging test and a post-change check.
Emergency Patch
£999
Same or next day
- ✓Safe PHP patch to a supported release
- ✓Backup before change
- ✓Staging check
- ✓Post-patch verification
Managed Maintenance
£299 / month
£2,999 billed annually — two months free
- ✓Ongoing PHP and dependency patching
- ✓Advisory monitoring
- ✓Monthly report
- ✓Backups and uptime checks
- ✓The £149 PHP check included to start
Version Upgrade
£4,999
1–3 weeks
- ✓Move off end-of-life PHP
- ✓Compatibility testing
- ✓Staging QA
- ✓Rollback plan and post-upgrade support
Prices are indicative ranges based on project scope. Contact us for a tailored quote.
Frequently Asked Questions
Do you audit dependencies before upgrading?+
Yes — the first step in every framework upgrade is a full dependency audit against your composer.json and vendor directory, surfacing every incompatibility before work starts.
What if more than 5 items break?+
Additional broken items are £95 each, and the count is always agreed with you before we write any fixes. We never bill an estimate.
What framework versions do you support?+
We support framework upgrades from PHP 8.1 (end-of-life) and 8.2 (end of life 31 Dec 2026) up to 8.5. The check determines your starting point.
Can you upgrade an old framework like CodeIgniter 3 or Zend Framework 1?+
Yes, but unsupported framework versions add risk: they may have no PHP-8-compatible upstream release. Where that's the case we'll tell you the options — community forks, targeted patches, or a migration quote — before any work starts.
How long does a framework PHP upgrade take?+
A same-branch patch is usually same or next working day. A version upgrade with dependency repair typically runs one to three weeks depending on how much custom code the framework touches. The £149 check gives you the scoped timeline in writing.
Start With the £149 PHP Check
Tell us which application you run and which PHP version it's on. You get a written report of your exposure and the recommended next step.