I came across lots of hosting companies are unwilling to upgrade to PHP5.3. Most of them gave me the reason is that there are lots of bugs in PHP5.3, so they prefer to keep it at version 5.2.
What is wrong with v5.3 then? is that true what they said - lots of bugs? I haven't come across any bugs on my local server!
Or are they just unwilling to upgrade!?
7, when PHP 5.3. 3 is used, an attacker is able to include and execute arbitrary files on the web server due to insufficient validation of the action parameter to setup/index. php, aka directory traversal.
And so most shared hosters have no incentive to upgrade existing servers.
For sure is not the only reason, but this (little) change has created a lot of problems in CMS like drupal:
Note: There is no reference sign on a function call - only on function definitions. Function definitions alone are enough to correctly pass the argument by reference. As of PHP 5.3.0, you will get a warning saying that "call-time pass-by-reference" is deprecated when you use & in foo(&$a);.
Quoted from PHP: Passing by Reference
So, probably the first hosting companies moving to php 5.3 had been flooded by support requests coming from little (and unexperienced) web managers.
Hence, I suppose other companies decided to wait for a more stable situation...
It's not php 5.3 that 's buggy, but it will point out bad practices in application-code by spitting out notices and deprecation warnings.
So when old php libraries are used, you'll probably see a lot of error messages, which could be perceived as bugs.
PHP 5.3.0 was released on 30 June 2009, and 5.2 is no longer officially supported by php.net. If your hosting company doesn't step up, it's time to switch.
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With