Correct the missleading "Your PHP version is outdated"
complete
Rune Rasmussen
Under "Security > Site health" you're displaying "Your PHP version is outdated".
When doing so, it would be useful if you included which version you're seeing here.
Anyhow it doesn't make any sense displaying this for sites who is running on t.ex. PHP 8.2.29, as PHP 8.2 is still fully supported regarding security until December 31, 2026 (https://www.php.net/supported-versions).
There is absolutely no reason to warn about PHP 8.2 at this stage, it's secure, and should not be flagged as outdated and a security issue. That's completely wrong in so many ways.
You can indeed recommend people to use PHP 8.3, as also WP does, but it's not outdated in any way.
WP Site Health now lists it as a
recommended
improvement, with the title text:"Your site is running on an
older
version of PHP (8.2.x), which should be updated"Later when it's being considered EOL, they will change it to
critical
, and then also switch the title text into:"Your site is running on an
outdated
version of PHP (8.2.x), which should be updated."It's a huge different in those, and what you're currently doing, flagging it as outdated and a security risk in red ... ;)
Aurelio Volle
complete
Hello folks,
Thank you for the feedback, we've made the edit and now have two adequate wordings for these two different situations.
We've decided to still flag this as attention needed, cause it's something we want to warn people about before it actually becomes critical.
Better safe than sorry.
Thanks for the feedback.
Rune Rasmussen
Aurelio Volle there is nothing to warn about at this stage, everyone is safe and fine using PHP 8.2, so you are still doing it wrong!
It still makes no sense...
Rune Rasmussen
Thomas Deneulin (CTO WP Umbrella) you're still doing it wrong...
K
Kyle
Aurelio Volle Thanks for the update and the improved wording - that's definitely better.
I understand the "better safe than sorry" approach, but some of us have hosting companies that automatically handle PHP upgrades before security support ends, so we're getting warnings about versions that are still perfectly safe and receiving security patches.
Would it be possible to add an option to disable these warnings for users who don't need them?
Aurelio Volle
Kyle this is a very good use case explanation and feedback. Thank you! We didn't create the risks with the possibility for our users to dismiss them but we will work on this in the coming weeks/months. That would fix the situation but we need some time to release this!
Thomas Deneulin (CTO WP Umbrella)
Thank you for this recommendation.
Please note that this message is directly related to WordPress Site Health. The WordPress core has modified this information, which directly affects us as we follow their recommendation. In fact, you also have this information message in the administration of your WordPress site in Site Health.
Rune Rasmussen
Thomas Deneulin (CTO WP Umbrella) I'm not sure if you're responding as a user or on behalf of WP Umbrella, but what you write simply isn't true, as I also wrote above - WPU don't follow WordPress here. Please read it more carefully, and also check what the WordPress Site Health actually tells us.
PHP 8.3 is a RECOMMENDED IMPROVEMENT, not a CRITICAL ISSUE - it's a huge different in those and what WPU is doing/saying...
Even PHP 8.1 is still just listed as a recommended in WordPress Site Health, while PHP 8.0 is considered a critical issue.
See the attached images, taken today in WordPress Site Health.
Thomas Deneulin (CTO WP Umbrella)
Rune Rasmussen I am responding as CTO of WP Umbrella.
Thank you very much for this information. However, we do not make three levels of distinctions (good, recommended, critical), but only two (good or not good). But for sure, we can try to adapt the wording in this case, to seem less worrying.
Rune Rasmussen
Thomas Deneulin (CTO WP Umbrella) well, WP also just have two levels. You added good, and what you do is currently clearly wrong in several ways.
*I recommend you add a signature on your replies, or mark your profile in any way, when any WPU member is responding on behalf of WPU - else you're just an unknown name. ;)
J
John Sharkey
I agree as well. The message is incorrect. I flagged this with my WP managed host, Siteground, who said they only move sites to the latest vesion when they feel it stable, and are still waiting on 8.3.
G
Gabriel
I second that! Very good suggestion!