Situation:: My current web host has given me a brand new VPS today with PHP 5.2.9 (released: Feb 2009).
What I did: I asked my web host to upgrade it to latest PHP 5.3.5 so I can get all security vulnerabilities fixed.
What web host replied: No, you should not. Your PHP scripts will break. Instead you can use PHP 5.2.17.
My Question: Should I force my web host to install PHP 5.3.5 on my VPS? What problem can possibly I get by upgrading. I currently do not use any PHP 5.3 features but may use those in future. My main concern is to get fully secure from known vulnerabilities.
Please don’t close this question. It’s not directly related to programming but is related to PHP which only PHP experts at SO can answer, I guess.
Well, simply install PHP 5.3.5 locally and see if any of your scripts break. If everything’s okay, let them install PHP 5.3.
Concerning “It will break things”: PHP normally is backwards compatible. Maybe it will give you some
E_STRICTerrors, but those don’t break scripts. But really, you should just try 😉