Page 1 of 1

Does VestaCP have any plans to upgrade php 5.6?

Posted: Thu Aug 29, 2019 9:30 am
by deanhills
Does VestaCP plan to upgrade php 5.6? I thought that 5.6 was no longer supported with security updates? It is therefore a security risk?

PHP 5.6 is also no longer sufficient for the latest versions of web development scripts.

Is there a reason VestaCP is still with php 5.6?

Re: Does VestaCP have any plans to upgrade php 5.6?

Posted: Thu Aug 29, 2019 10:41 am
by demlasjr
Hi,

You can manually update it, for example you can use this tutorial: viewtopic.php?f=11&t=17581

Also you can install multiphp, there are plenty of tutorials in internet already.

Re: Does VestaCP have any plans to upgrade php 5.6?

Posted: Thu Aug 29, 2019 11:28 am
by geek
deanhills wrote:
Thu Aug 29, 2019 9:30 am
Does VestaCP plan to upgrade php 5.6? I thought that 5.6 was no longer supported with security updates? It is therefore a security risk?

PHP 5.6 is also no longer sufficient for the latest versions of web development scripts.

Is there a reason VestaCP is still with php 5.6?
I recently learned that vestaCP Does not update any individual software packages (php/apache/mysql). All software must be MANUALLY Updated!

Re: Does VestaCP have any plans to upgrade php 5.6?

Posted: Fri Aug 30, 2019 1:56 am
by sysdop
VestaCP is more an interface than a control panel, if you use Ubuntu you can update using apt-get update && apt-get upgrade and if you use CentOS yum update -y && yum upgrade -y

If you use CentOS, in /etc/yum.repos.d edit the remi-php73.repo and change enabled=0 to 1 of [remi] and [remi-test] category & run the commands yum update -y && yum upgrade -y

If you obtain a error try remove php-xcache or related...

Re: Does VestaCP have any plans to upgrade php 5.6?

Posted: Fri Aug 30, 2019 4:31 am
by plutocrat
I think you're confusing the version of php that vesta installs to run its web interface (the vesta-php package) with the PHP available to the OS you're running. While its true vesta-php is an old version, for reasons best known to the developers, your OS will probably come with php 7.2 as default, and you're welcome to upgrade to PHP 7.3 if you wish.

Compare:
/usr/bin/php --version
/usr/local/vesta/php/bin/php --version

The first is the version that your OS installs, which is determined by the OS maintainers.
The second is the version that vesta installs to run its web interface.

Re: Does VestaCP have any plans to upgrade php 5.6?

Posted: Tue Sep 03, 2019 2:36 am
by deanhills
Thank you for the responses. I was hoping to get one from the Admin. As I know how to update php through the panel. However, I can't understand why the installation of VestaCP is working with an out of date php, like isn't it time to update their installation of php to be current? Particularly since 5.6 is no longer supported any longer.

Like for newcomers who use VestaCP for the first time (I'm not a newcomer but an Admin at a hosting Giveaway Forum) they don't look at the php version and just assume it's up to date, until they install a script and has all kinds of issues with the installation of the script, and then when they learn for the first time to check the version of php in VestaCP, they realize they're on a seriously out of date version of php.

Is it such a big issue to fix in the installation? Like I understand that it doesn't get updated with every new version of php, but 5.6 is really light years ago in php life.

OR. Maybe the Admin could just add a notice to the Installation Page of VestaCP that users have to update the php version that is available through the panel, so new users know that the VestaCP installation script is on an out of date version of php.

Re: Does VestaCP have any plans to upgrade php 5.6?

Posted: Wed Sep 04, 2019 3:37 am
by plutocrat
OK, first of all I don't think you fully grasped what I was trying to say. If users install and run a script, as you say, or check the version of PHP, they will see the version of PHP which is installed with the operating system. This will usually be PHP 7.2 or 7.3 on a reasonably up to date OS. This is what you see when you log in as that user and type "php --version". So no, users are not running an outdated version of PHP, and their Wordpress installs, or whatever will run just fine.

VestaCP uses its own separate install of php which is located in /usr/local/vesta/php. This is used to run its web interface on servername.com:8083. I think they probably set it up to be self-contained, so that it still works even when you screw up your regular apache/nginx/php config, and you can get things back to normal. Normal users on the system will not have access to this version of PHP.

Having said that I agree that it probably should be updated from 5.6. As I'm a curious person, I looked over at the forked version of vestacp, which I probably shouldn't name in this forum, and downloaded their php package, which is at version 7.3. I was able to unpack this on a test vestacp system and replace /usr/local/vesta/php with the 7.3 version. (The only adjustment needed was to alter the paths a little. PM me if you need details).
I did a quick test, added a couple of domains, changed a firewall rule, etc, and it all seemed to be working. Obviously a change like this would need a proper debugging session, but yes, as far as I could tell, it all worked with 7.3, so I'd vote for refreshing the vesta-php package with a 7.3 version too.