# New PHP. A working service.

> We resolve website, store and application failures after PHP upgrades. Free initial diagnosis, agreed scope and code adaptation.

Source: https://sprutus.eu/en/

Has your service stopped working after a PHP upgrade? We diagnose the issue, adapt the code and restore key functions.

Free initial diagnosis • Agreed scope • Recovery plan

Initial diagnosis within 48 hours of agreeing the terms and receiving the required access and information. Time spent waiting for the client is excluded. We agree the delivery schedule separately.

## Technical problems. A clear plan of action.

We start with what stopped working and how it affects your business.

### Your service has stopped working

Orders, forms, payments or sign-in are failing. We investigate the cause and the changes required.

- Orders, payments and forms
- Application and dependency errors
- Connections to external systems

### Your host requires newer PHP

You have received a warning or a deadline. You need to know what to check and how to prepare your service.

- The hosting provider’s PHP version and package
- CMS and extension requirements
- The hosting deadline and changes needed

### Code and modules limit development

Issues in libraries, extensions or integrations prevent an upgrade or block new functionality.

- Problematic libraries and modules
- Compatibility with the agreed PHP versions
- Options for adapting existing code

### Risks to customer data

You handle customer data and need to assess technical storage risks. We agree access and checks first; changing PHP alone does not establish GDPR compliance.

- The data your service handles
- Access to components and data
- The agreed technical checks

### Preparing a new feature

You want to develop your service, but dependencies limit your PHP choices. We agree requirements and assess compatibility before making changes.

- Requirements for the planned feature
- Limits of current dependencies
- Scope of changes and acceptance criteria

## Critical PHP bugs. Real risks to your service.

On 21 October 2026, the PHP project released fixes for CVE-2026-109618 and CVE-2026-109619. These vulnerabilities may allow unauthenticated remote code execution.

The potential impact concerns service operation and data. A version number alone does not establish whether an installation is secure or has been compromised.

- Unauthorised code execution on the server
- Risk of data access and changes to service behaviour
- Possible disruption to orders, payments and customer service

## PHP security advisory

Critical vulnerabilities • RCE

### Out-of-memory handling flaw

PHP can mishandle request data when memory runs out. This can allow remote code execution.

### Use of freed memory

A PHP worker may reuse internal data left by an earlier request. This can allow code execution without authentication.

Fixes were released in PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35. We check the installed package, vendor patches and subsequent security advisories.

Later notices also matter: 23 Oct — session upload progress under a specific configuration; 26 Oct — rebuilt Windows packages with a Brotli fix. The PHP version number alone is insufficient.

Information checked: 28 October 2026

[Read the official PHP advisory](https://www.php.net/archive/2026.php)

## Why is switching PHP sometimes not enough?

These are separate tasks. An available urgent fix should not wait for a lengthy application migration.

### Patch the environment

First, check available fixes and vendor packages. Sometimes a hosting update is enough and no application rework is needed.

### Adapt the components

Code, CMS, plugins, libraries and integrations may need changes. We adapt agreed components in your environment, with compatibility across the PHP versions we agree.

### Verify business functions

A working homepage does not prove checkout, payments, forms or login work. We test the agreed scenarios before deployment.

We start by evaluating the latest stable release. You approve the target version, scope, cost and schedule after diagnosis.

## Focus on the functions your customers use.

We choose checks around the way your website, store or application actually works.

### Company website

Contact forms, content, bookings and connections to your business systems.

### B2B wholesale store

Partner accounts, customer pricing, orders and inventory integrations.

### Online retail store

The catalogue, basket, payments, delivery and order processing.

### Blog or personal website

Publishing, content management, forms and installed extensions.

### Flower delivery service

Product selection, delivery dates, payment and order fulfilment.

### Restaurant delivery

Menus, orders, delivery areas and integrations with restaurant operations.

## CMS and e-commerce platforms

We review the system, modules, themes and integrations that your service depends on.

MODX, WordPress, Magento Open Source, WooCommerce, PrestaShop.

We confirm feasibility for your specific version and configuration.

## From the cause of a problem to an agreed release.

Each stage has a defined scope. We agree changes and environment access with you.

### Terms and free initial diagnosis

After a contract is signed or the terms are accepted, and the agreed access and information are received, we provide an initial diagnosis within 48 hours. Time spent waiting for the client is excluded.

Stage outcome: Initial findings, diagnosis limits and the next step.

### Solution and proposal

We agree the scope, price and schedule. The latest stable PHP release is our starting point for assessment; dependencies determine the target version and required compatibility range.

Stage outcome: An agreed PHP version, scope, price and schedule.

### Adaptation and checks

We adapt code, modules and integrations in the agreed client environment. We check key workflows and compatibility with the specified PHP versions.

Stage outcome: Results of the agreed functional and compatibility checks.

### Release and handover

We agree the release and recovery plan. You receive a change list, check results and known limitations.

Stage outcome: Change list, test results, recovery plan and remaining limits.

## Know what has changed and what has been checked.

- An agreed PHP version and compatibility range.
- A list of code, module and integration changes.
- Results of the agreed functional checks.
- A recovery plan.
- Known limitations and recommended next steps.

## A team to build and develop your software.

Start with a specific PHP issue and agree further development as a separate project.

### Services from idea to release

Product design, implementation and launch against agreed requirements.

- Define the problem and user scenarios
- Design and implementation
- Checks and an agreed launch

### Applications

Web and mobile applications. We choose platforms, features and delivery requirements around the task.

- Choose platforms and feature scope
- Build the interface and system connections
- Verify key user scenarios

### AI integrations

Assistants, workflow automation and connections between AI models, business data and tools.

- Choose a process to automate
- Connect models to data and tools
- Evaluate results and solution limits

### E-commerce

Stores, B2B services and integrations for payments, delivery, inventory and customer operations.

- Catalogue, checkout and orders
- Payment, delivery and stock integrations
- Verify the customer’s path to purchase

## Meet the people responsible for the work.

We combine design, frontend and engineering skills. Responsibilities are agreed for each project.

### Artur

Design and PHP

Interface design and work on PHP code.

[skarbart.com](https://skarbart.com/)

### Oleg

Frontend and communication

The interface layer and project communication.

### Maksim

Engineering and coordination

The technical approach, implementation and release coordination.

[msal.eu](https://msal.eu/)

## Your key questions, answered.

### What is free, and when does the 48-hour period start?

The consultation and initial diagnosis within the agreed scope are free. The diagnosis period starts after a contract is signed or the terms are accepted, and the required access and information are received. Time spent waiting for the client's information or actions is excluded. You receive initial findings and next steps; we state any limits to what can be confirmed. This is not a deadline for completing all the work.

### How much does the work cost, and how long does it take?

After diagnosis, we agree the solution, scope, price and schedule. These depend on the code, dependencies, integrations and checks required. Additional work requires a separate agreement.

### Can I contact you if I do not know the PHP version?

Yes. Share the website address or service name and describe the symptoms. You can also include your hosting provider's message. We will establish the technical details during the next steps.

### Does the whole service need to be rebuilt?

We first assess whether the existing components can be adapted. A module replacement or wider changes may be needed if further adaptation is impractical. You approve the scope before implementation.

### How do I provide access, and how is data handled?

Do not send passwords or keys through the form. We agree the required permissions, access transfer method and data handling terms before diagnosis. Work takes place in the agreed client environment.

### Does an upgrade address every security issue?

No. We assess the agreed scope and specific fixes. A full security audit, penetration testing, incident investigation and legal compliance assessment are outside a standard PHP adaptation.

### Will there be downtime?

That depends on the environment and the changes. Before deployment, we agree any maintenance window, the checks and a recovery plan. We cannot promise no interruption without assessing the specific service.

### Can you retain compatibility with the previous PHP version?

Where needed, we agree a specific range of old and new versions and the test scenarios. We do not promise compatibility with every version. Compatibility does not replace installing security fixes.

### What is outside standard PHP adaptation?

The core service does not include large infrastructure migrations, round-the-clock support, full security audits, penetration testing or breach response. These tasks require separate assessment and agreement on scope.

## Get a proposal for your service.

Tell us what stopped working or what change you are planning. A short description is enough to start.

[Contact](https://sprutus.eu/en/#contact)

Choose an available messenger or another contact channel.

Do not enter passwords, API keys or other access credentials.

+48 794 489 744