PHP version checker

Enter a website. We read the headers it sends and tell you which PHP version it exposes, whether php.net still ships security fixes for it, and which security headers are missing. One normal request, nothing stored but the domain and grade.

Supported PHP versions

From php.net/supported-versions, checked 31 Oct 2026. Each branch gets two years of bug fixes, then two years of security fixes only.

BranchBug fixes untilSecurity fixes until
8.531 Dec 202731 Dec 2029
8.431 Dec 202631 Dec 2028
8.331 Dec 202531 Dec 2027
8.231 Dec 202431 Dec 2026
8.1 and olderEnd of life. No fixes.

If you are on 8.2, security fixes stop on 31 Dec 2026. That is the upgrade to plan now.

What we check

PHP version from the X-Powered-By header, compared with the table above. Version leaks in the X-Powered-By and Server headers. Security headers: Strict-Transport-Security, Content-Security-Policy, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, and X-Frame-Options or CSP frame-ancestors.

The grade is a quick read, not a full audit. A site can score A and still run an old CMS plugin.

FAQ

It says my PHP version is not disclosed. How do I find it?

Good, that is the safer setup. Run php -v on the server, or check your hosting panel. Note that the command-line PHP can differ from the one serving the site.

How do I hide the PHP version?

Set expose_php = Off in php.ini and restart PHP-FPM or Apache. For the web server, use ServerTokens Prod on Apache or server_tokens off; on nginx.

Can I link to this tool?

Yes. Link to https://ableadmins.com/php-version-check, or prefill a site with ?url=example.com.

PHP upgrade help: Able Rescue $199

Questions about a result? Email greg@ableadmins.com.

Checks run from our US server. Private and internal addresses are refused. Limit: 10 checks a minute, 100 a day.