Where EE3, EE4 and EE5 stand
From the official version support table:
- EE3: security fixes ended 14 December 2018.
- EE4: security fixes ended 16 November 2019.
- EE5: security fixes ended 31 December 2021.
None of them support PHP 8.2, the oldest PHP branch that still gets security fixes. So the site and the server it needs are both unpatched.
Why it's a smaller job than EE2
EE3 introduced the system/user/ folder structure, and EE4 and EE5 kept it. That means no restructure: the updater runs on your existing install. The effort goes into:
- Add-ons: checking each for an EE7 release. Most popular ones have one.
- The EE4 control panel change: EE3 add-ons that build control-panel screens may need updates.
- PHP 8: custom extensions and any PHP in templates.
For older EE2 sites, see Upgrade ExpressionEngine 2 to EE7.
How it works
- 1
Free audit
Version, add-ons and PHP check, with a fixed quote.
- 2
Staging copy
Own database and system folder, on the target PHP version.
- 3
Update add-ons
Download EE7 releases, replace or patch the rest.
- 4
Run the EE7 update
From the command line on large sites, so nothing times out.
- 5
Test
Every template, form and channel; error log checked.
- 6
Go live
Quiet window, fresh backup, error log watched after launch.