forwarddd

Is PHP outdated? How websites are built in 2026

Most of the web runs on PHP, often on versions that no longer get security updates. Meanwhile the browser itself can do things you used to need a plugin for. A tour of the new stack.

Published 10 min read

W3TechsUsage Statistics and Market Share of PHP for Websites2026
27sources, from research papers to official documentation

In short

  • PHP is not dead: 69.1% of websites with a known server-side language run on it, and modern PHP 8 is actively maintained.
  • The problem is the version. 34% of PHP sites run PHP 7 or older, and those versions haven’t had security updates for years.
  • jQuery, a tool from 2006, is still on 64% of all websites. The browser can now do much of what it did on its own.
  • New CSS like container queries and :has() works in all major browsers. What used to take JavaScript or a plugin now takes a few lines of code.
  • A modern site runs close to the visitor, sends only the code it needs and meets Google’s speed standards. You see that in your revenue.

Is PHP dead?

No. Anyone who says so hasn’t looked closely. PHP runs on 69.1% of all websites whose server-side language is known1W3Techs, 2026Usage Statistics and Market Share of PHP for WebsitesOpen the source. The language is actively developed, and PHP 8 is far more modern than the versions from ten years ago. WordPress, Wikipedia and countless online stores run on it.

The real problem is somewhere else: the version a site runs on. Every PHP version gets two years of full support, then two years of security updates only. After that, nothing2PHP.net, 2026Supported Versions / Unsupported BranchesOpen the source. Right now, only PHP 8.4 and 8.5 are fully supported. PHP 8.1 got its last update on December 31, 2025, and PHP 8.2 gets its last one on December 31, 20262PHP.net, 2026Supported Versions / Unsupported BranchesOpen the source.

34%

of all PHP sites still run PHP 7 or older: versions that haven’t had security updates in years. Add PHP 8.0 and 8.1, and it’s almost half (our calculation)3W3Techs, 2026Usage statistics of PHP version 8 / PHP for websitesOpen the source2PHP.net, 2026Supported Versions / Unsupported BranchesOpen the source.

A site on an outdated PHP version often works just fine. Until someone finds a vulnerability that no longer gets fixed. It’s like a car that skips its safety inspection: it still drives, but nobody is checking the brakes anymore.

What changed in ten years

Most websites are still built the way it was done around 2010: a server that assembles the page with PHP on every visit, a theme for the look, plugins for the features and jQuery for anything that moves. It works, but it’s slow and vulnerable. A lot has changed since then.

What most sites still run onWhat came after
  1. 1995PHPRasmus Lerdorf releases the first version.
  2. 2003WordPressStarts as blogging software.
  3. 2006jQuerySmooths over browser differences.
  4. 2012TypeScriptJavaScript with types: errors caught before launch.
  5. 2013ReactInterfaces built from components.
  6. 2017Edge hostingCode runs close to the visitor (Cloudflare Workers).
  7. 2023BaselineOne label for what every browser supports.
  8. 2024INPResponsiveness becomes a Core Web Vital.
  9. 2025Accessibility ActEU rules for webshops and online services.
  10. 2026PHP 8.2 endsLast security updates on 31 December.

A modern site flips this around. Pages are built ahead of time or at the edge of the network, close to the visitor. The interface is made of reusable components. The code is typed, so errors get caught before a visitor ever sees them. And the browser does far more on its own than it used to.

jQuery: the tool you no longer need

In 2006, jQuery was a lifesaver. Every browser did things slightly differently, and jQuery smoothed out those differences. Twenty years later, it’s still on 64.3% of all websites4W3Techs, 2026Usage statistics of jQuery (all versions)Open the source. On mobile pages, it’s still the most used JavaScript library: 74%, compared with 10% for React5HTTP Archive, 2025JavaScript | 2024 | The Web Almanac by HTTP ArchiveOpen the source.

The problem: the browser can now do almost everything jQuery did. So sites often load it for nothing. That fits a bigger pattern: of all the JavaScript an average mobile page loads, about 44% isn’t even used5HTTP Archive, 2025JavaScript | 2024 | The Web Almanac by HTTP ArchiveOpen the source. Every kilobyte you don’t need makes your site slower.

The browser can do much more than you think

To keep track of what works everywhere, Google introduced Baseline in 2023: a label for features that work in all major browsers. After two and a half years, a feature like that counts as widely available6web.dev, 2023Baseline; Introducing BaselineOpen the source. Browser makers also work together in Interop to iron out the differences. Interop 2025 ended with a score of 95 out of 1007web.dev, 2026Interop 2026: Continuing to improve the web for developers; Launching Interop 2026Open the source.

The result: things that used to need JavaScript, a plugin or a lot of fiddling are now plain CSS:

  • Container queries. A component adapts to the space it gets, not to the screen. Widely available8W3C WebDX Community Group, 2026Container queries (Baseline: widely available)Open the source.
  • :has(). An element responds to what’s inside it, like a form field that turns green when it’s filled in correctly. Widely available9W3C WebDX Community Group, 2026:has() (Baseline: widely available)Open the source, and according to the State of CSS survey the most used and most loved new CSS feature10Devographics, 2025State of CSS 2025 – Awards; AboutOpen the source.
  • Nesting. Cleaner code, without extra tools. Widely available11W3C WebDX Community Group, 2026CSS nesting (Baseline: widely available)Open the source.
  • View transitions. Smooth transitions between screens, without an animation library. In all major browsers since October 202512W3C WebDX Community Group, 2026View transitions (Baseline: newly available since October 2025)Open the source.
  • Anchor positioning. Menus and tooltips that stay neatly attached to a button. Available since 2026, but not fully supported everywhere yet13MDN Web Docs, 2026anchor-name (CSS anchor positioning)Open the source.

TypeScript and components: fewer bugs

The way code gets written has changed too. TypeScript is JavaScript with types: the code knows a price is a number and a name is text, and warns you when that’s wrong. So bugs get caught during the build, not by your customers. In Stack Overflow’s Developer Survey, 43.6% of developers use TypeScript, compared with 18.9% for PHP. React is used by 44.7%, jQuery by 23.4%14Stack Overflow, 2025Stack Overflow Developer Survey 2025 – TechnologyOpen the source.

Components also make a site more consistent. A button, a pricing block or a form is built once and reused everywhere. Change it, and it changes everywhere at once.

Close to the visitor

A website used to live on one server in one data center. A visitor on the other side of the world had to wait longer. Now a site can run on a global network. Cloudflare, which we build on, is in more than 330 cities in more than 125 countries15Cloudflare, 2026500 Tbps of capacity: 16 years of scaling our global network; Cloudflare Global NetworkOpen the source. The code runs in lightweight environments that, according to Cloudflare, start up about a hundred times faster than a traditional server in a container16Cloudflare Docs, 2026Cloudflare Workers (docs overview); How Workers worksOpen the source. Your visitor gets the site from the nearest server.

Why this isn’t tech for tech’s sake

Google measures how fast and stable your site is with the Core Web Vitals: the main content within 2.5 seconds, a response to a click within 200 milliseconds and a page that doesn’t jump around17web.dev, 2020Web Vitals; Interaction to Next Paint (INP)Open the source. Since March 12, 2024, that responsiveness metric, INP, counts instead of the older FID18web.dev, 2024Interaction to Next Paint becomes a Core Web Vital on March 12Open the source. Google itself writes that good Core Web Vitals line up with what its ranking systems aim to reward19Google Search Central, 2025Understanding Core Web Vitals and Google search resultsOpen the source.

48%

of websites pass the Core Web Vitals on mobile20HTTP Archive, 2026Performance | 2025 | The Web Almanac by HTTP Archive (Chapter 7)Open the source

+7%

more revenue for redBus after it responded faster to clicks21web.dev, 2023How redBus improved their website's Interaction to Next Paint (INP) and increased sales by 7%Open the source

−43%

fewer visitors leaving right away at The Economic Times after faster load times22web.dev, 2021How The Economic Times passed Core Web Vitals thresholds and achieved an overall 43% better bounce rateOpen the source

Older Google data already pointed the same way: if a mobile page takes 10 seconds to load instead of 1, the chance that a visitor leaves goes up by 123%23Think with Google, 2018Find out how you stack up to new industry benchmarks for mobile page speedOpen the source. Speed is not a technical detail. It decides whether someone stays.

Accessibility is now the law too

Since June 28, 2025, EU rules have covered the accessibility of things like online stores and online services24Europese Unie (Richtlijn 2019/882), 2019Directive (EU) 2019/882 on the accessibility requirements for products and servicesOpen the source. In the Netherlands, small businesses with fewer than 10 employees and no more than €2 million in annual revenue are exempt25Rijksoverheid, 2025Producten en diensten toegankelijker voor mensen met beperkingOpen the source. There’s work to do: WebAIM found errors on 95.9% of the largest websites, 56 per page on average. The most common one: text with too little contrast26WebAIM, 2026The WebAIM Million – The 2026 report on the accessibility of the top 1,000,000 home pagesOpen the source.

The good news: modern technology helps. Build with clean HTML, clear buttons and enough contrast, and you get a site that works better for everyone, including search engines and AI.

What does this mean for your website?

  • Ask your hosting provider which PHP version your site uses. Lower than 8.3? Plan an upgrade, and test whether your theme and plugins can handle it.
  • Check your speed in PageSpeed Insights or in Search Console under Core Web Vitals.
  • Count your plugins. Every plugin is code from another vendor that has to be kept up to date. Whatever you don’t use can go.
  • Check the contrast of your text and whether your site can be used with just a keyboard.
  • Is your site old and slow? Then rebuilding is often cheaper than repairing it again and again. Also read WordPress or custom-built?

Want to know for sure? The free Future-Proof Website Scan checks things like your speed, technology and how easy you are to find, and you get a report within 24 hours.

How we build

We build with React, TypeScript and Tailwind, and host on Cloudflare’s network. Pages are rendered on the server, so the text is right there in the HTML for visitors, Google and AI systems. You get an admin area for whatever you want to change, and we keep the technology up to date. Read more about our approach on web development.

Frequently asked questions

  • The language isn’t: PHP runs on 69.1% of websites with a known server-side language1W3Techs, 2026Usage Statistics and Market Share of PHP for WebsitesOpen the source and is actively developed. But many sites do run on an outdated version. Only PHP 8.4 and 8.5 are still fully supported, while 8.2 and 8.3 only get security updates2PHP.net, 2026Supported Versions / Unsupported BranchesOpen the source.

  • At the very least, a version that still gets security updates. WordPress recommends PHP 8.3 or newer27WordPress.org, 2026RequirementsOpen the source. PHP 8.2 stops getting updates after December 31, 20262PHP.net, 2026Supported Versions / Unsupported BranchesOpen the source.

  • Not necessarily. If it runs on a current PHP version, is fast and is well maintained, you can keep going. If it’s slow, outdated or full of plugins, rebuilding is often better value than repairing it over and over.

  • Three Google measurements of the experience on your site: how fast the main content loads (LCP, good under 2.5 seconds), how quickly the page responds to a click (INP, good under 200 milliseconds) and how much the page shifts around (CLS, good under 0.1)17web.dev, 2020Web Vitals; Interaction to Next Paint (INP)Open the source.

  • A label for web features that work in all major browsers: Chrome, Edge, Firefox and Safari. A feature starts out as newly available and becomes widely available after 30 months6web.dev, 2023Baseline; Introducing BaselineOpen the source. That way a developer knows what is safe to use.

Sources

  1. 1W3Techs, 2026Usage Statistics and Market Share of PHP for Websites
  2. 2PHP.net, 2026Supported Versions / Unsupported Branches
  3. 3W3Techs, 2026Usage statistics of PHP version 8 / PHP for websites
  4. 4W3Techs, 2026Usage statistics of jQuery (all versions)
  5. 5HTTP Archive, 2025JavaScript | 2024 | The Web Almanac by HTTP ArchiveAbdul Haddi Amjad & Nishu Goel
  6. 6web.dev, 2023Baseline; Introducing BaselineRachel Andrew
  7. 7web.dev, 2026Interop 2026: Continuing to improve the web for developers; Launching Interop 2026Rachel Andrew
  8. 8W3C WebDX Community Group, 2026Container queries (Baseline: widely available)
  9. 9W3C WebDX Community Group, 2026:has() (Baseline: widely available)
  10. 10Devographics, 2025State of CSS 2025 – Awards; About
  11. 11W3C WebDX Community Group, 2026CSS nesting (Baseline: widely available)
  12. 12W3C WebDX Community Group, 2026View transitions (Baseline: newly available since October 2025)
  13. 13MDN Web Docs, 2026anchor-name (CSS anchor positioning)
  14. 14Stack Overflow, 2025Stack Overflow Developer Survey 2025 – Technology
  15. 15Cloudflare, 2026500 Tbps of capacity: 16 years of scaling our global network; Cloudflare Global NetworkTanner Ryan
  16. 16Cloudflare Docs, 2026Cloudflare Workers (docs overview); How Workers works
  17. 17web.dev, 2020Web Vitals; Interaction to Next Paint (INP)Philip Walton
  18. 18web.dev, 2024Interaction to Next Paint becomes a Core Web Vital on March 12Jeremy Wagner & Rick Viscomi
  19. 19Google Search Central, 2025Understanding Core Web Vitals and Google search results
  20. 20HTTP Archive, 2026Performance | 2025 | The Web Almanac by HTTP Archive (Chapter 7)Himanshu Jariyal et al.
  21. 21web.dev, 2023How redBus improved their website's Interaction to Next Paint (INP) and increased sales by 7%Amit Kumar & Saurabh Rajpal
  22. 22web.dev, 2021How The Economic Times passed Core Web Vitals thresholds and achieved an overall 43% better bounce rateAnshu Sharma et al.
  23. 23Think with Google, 2018Find out how you stack up to new industry benchmarks for mobile page speedDaniel An
  24. 24Europese Unie (Richtlijn 2019/882), 2019Directive (EU) 2019/882 on the accessibility requirements for products and services
  25. 25Rijksoverheid, 2025Producten en diensten toegankelijker voor mensen met beperking
  26. 26WebAIM, 2026The WebAIM Million – The 2026 report on the accessibility of the top 1,000,000 home pages
  27. 27WordPress.org, 2026Requirements

Rather have someone sort it out for you?

Tell us what you're working on, and you'll soon know what you need and what it costs.

Chat via WhatsApp
Or email info@forwarddd.com