Breach and store takeover
Known vulnerabilities in old PHP versions aren't fixed. An attacker can plant their own code on the server, change your store or use it to send spam and attack others.
Services / OpenCart / PHP upgrade
Upgrade your OpenCart store
to a newer PHP
A secure, fast, supported online store, with no lost sales. We update the OpenCart core, theme and modules for payments, shipping and accounting, so your store runs reliably on a supported PHP version. We start with a free review.
Status as of November 2026
PHP 7.4, 8.0 and 8.1 no longer get security fixes.
PHP 8.2 loses them on 31 December 2026.
OpenCart is written in PHP, so the security of every OpenCart store depends directly on the PHP version on the server. The PHP project supports each version for about four years. Once support ends, newly discovered vulnerabilities are no longer fixed.
In October 2026, the critical PHP2Shell vulnerability (CVE-2026-109618, CVE-2026-109619) was published, which lets an attacker take over a server without logging in. On 26 October, the US agency CISA confirmed it is already being exploited in attacks. Official fixes were only released for PHP 8.2 to 8.5, so stores on older PHP versions remain exposed.
For secure operation, faster page loads and compliance with security standards, moving to PHP 8.3, 8.4 or 8.5 is essential. With OpenCart, you can't do this with one click in your hosting panel: the core, theme and modules need to be adapted first.
More about the PHP2Shell vulnerability in OpenCart (in Slovenian) →
- ✕ PHP 7.4 – no fixes since November 2022
- ✕ PHP 8.0 – no fixes since November 2023
- ✕ PHP 8.1 – no fixes since the end of 2025
- ! PHP 8.2 – fixes only until 31 December 2026
- ✓ PHP 8.3 – supported until 31 December 2027
- ✓ PHP 8.4 – supported until 31 December 2028 (recommended)
- ✓ PHP 8.5 – supported until 31 December 2029
Source: php.net, supported PHP versions.
Risks
What's the risk if you don't upgrade your store?
A store on an unsupported PHP version may seem to work fine for a while. But the risk grows month by month, and for an online store, the consequences directly affect sales, customer data and your reputation.
Customer data theft and GDPR
Your database holds names, addresses, emails, phone numbers and purchase history. A breach is a personal data breach with a duty to report it, possible fines and lost customer trust.
Fake payments and stolen keys
An attacker can plant a fake card payment form or steal your payment system keys. Banks and payment providers require supported, regularly updated software.
Sudden downtime from a forced upgrade
Hosting providers are phasing out unsupported PHP versions. If your host moves the store to a newer PHP before it's ready, you may get a blank page or a broken checkout – without warning.
A slower store and weaker SEO
Older PHP processes requests more slowly. Longer response times hurt user experience, conversion and Google rankings, where speed (Core Web Vitals) is one of the factors.
Stuck in the past
New modules, updates to payment and shipping plugins and accounting integrations only support newer PHP. A store left on the old version gradually loses the ability to develop.
Benefits of upgrading
What you gain with an updated store
Upgrading isn't just a security obligation. An updated store is faster, more stable and ready for new features.
Security fixes until 2028
On PHP 8.4, your store receives official security fixes until the end of 2028, and the OpenCart core and modules are updated to the latest stable releases.
Faster page loads
PHP 8 versions process requests noticeably faster than PHP 7. Customers browse products and check out faster, and the server can handle more visitors at once.
Better conditions for SEO
A shorter server response time improves your Core Web Vitals, which Google takes into account for rankings. A fast, secure store also has fewer abandoned carts.
Stable, error-free
We fix the warnings and errors in the logs caused by outdated code. Checkout, payments and invoicing work reliably.
Compatible with new modules
Your store can use the latest modules for payments, shipping, accounting and marketing, and is ready for further development.
Compliance and peace of mind
Supported software is the foundation for compliance with GDPR and payment provider requirements (PCI DSS). You focus on sales, we take care of the tech.
Scope of the service
We update your entire store,
not just the PHP version.
With OpenCart, simply switching the PHP version on the server usually isn't possible without preparation. Older platform versions, themes and third-party modules often aren't compatible with newer PHP and can break the store.
That's why we carry out a complete upgrade: we update the OpenCart core and adapt the theme and modules to work on supported PHP versions. We test on a staging copy before moving the changes to your live store.
We've been developing OpenCart stores for more than 20 years and know the modules stores use. More about our OpenCart services on the OpenCart developer and OpenCart store development pages.
- ✓ OpenCart core
- ✓ Theme (e.g. Journal) and design customisations
- ✓ Payment modules (cards, PayPal, Leanpay, pro forma invoice …)
- ✓ Shipping modules (Pošta Slovenije, GLS, DPD, parcel lockers …)
- ✓ Accounting and ERP integrations (Minimax, e-računi …)
- ✓ Price comparison, marketing and analytics (Ceneje, Google …)
- ✓ OCMOD/vQmod changes and your own custom code
- ✓ Server settings, PHP 8.3/8.4, database and cache
- ✓ Keeping products, customers, orders and SEO URLs
A free, no-obligation review
Review first. Then a clear plan and estimate.
Every OpenCart store is tailored to a company's specific needs, so the exact cost of an upgrade can't be set in advance. That's why we first review your store for free and prepare a clear migration plan.
Core review
We analyse your current OpenCart version and identify the safest upgrade path.
Module and theme review
We assess how compatible your installed modules, extensions and theme are with PHP 8.3 and 8.4.
Server environment review
We check your current PHP version, the PHP2Shell patch, settings and whether your hosting is ready for the update.
A transparent estimate of the work
Cost and timeline depend on the number of modules, code specifics and the age of the theme. You get an accurate estimate before you decide.
The review is free and doesn't commit you to anything. All we need is your store's domain; for a detailed module review, we may also need admin access, as agreed.
Process
How does the upgrade work?
01
Free review
You send us your store's domain. We review the core, theme, modules and server, and check the PHP2Shell patch.
02
Plan and quote
We prepare a migration plan with an estimate of work, costs and timeline, and recommend what to update and what to replace.
03
Staging copy
We move the store to a separate staging environment on PHP 8.3/8.4. Meanwhile, your live store keeps selling as usual.
04
Upgrade and testing
We update the core, theme and modules and test the entire purchase process, payments, shipping and invoicing.
05
Go-live and monitoring
Once you approve, we move the changes to the live store at the quietest time and monitor how it runs.
FAQ
Before we start
Answers to the questions OpenCart store owners most often ask us about upgrading to a newer PHP.
Ask us →How much does upgrading an OpenCart store to PHP 8.3 or 8.4 cost?
The price depends on your OpenCart version, the number and age of modules, the theme and custom code. That's why we first do a free review and prepare an accurate estimate of the work and costs before you decide.
How long does the upgrade take?
For smaller stores with a few modules, the upgrade is usually done within a few days. Larger stores with many integrations and customisations take longer. You get a timeline together with the estimate after the review.
Will the store keep working during the upgrade?
Yes. We carry out the upgrade on a separate staging copy, while your live store keeps taking orders as usual. We move the changes to the live store once you approve, at the quietest time.
Will products, customers, orders and SEO URLs be kept?
Yes. We keep all data in the database, images, settings and existing page URLs (SEO URLs), so your search engine rankings stay the same.
What if one of the modules isn't compatible with newer PHP?
We first check whether an updated version of the module exists. If not, we adapt the module ourselves or recommend replacing it with a suitable module that offers the same functionality.
Can my host just switch the store to a newer PHP?
For older stores, usually not. OpenCart before version 3.0.3.9 doesn't run on PHP 8, and newer versions often have incompatible themes and modules too. Switching without preparation can cause a blank page or a broken checkout.
Do I have to move to OpenCart 4?
No. For most existing stores, the safest path is upgrading to the latest release of the 3.x branch (OpenCart 3.0.5.1), which supports PHP 8.4 and 8.5 and most modules.
Do you also offer maintenance after the upgrade?
Yes. After the upgrade, we can take care of regular updates, backups, monitoring and help with further development of your store.
Let's take the first step
A free review of your
OpenCart store
Send us your store's domain. We'll review it and prepare a free plan for moving to PHP 8.3 or 8.4, with an estimate of the work and costs. You can also email us at podpora@qstom.si.