Critical PHP security fixes released, 21 October. Is your site affected? Here's what to do.

All-inclusive PHP maintenance services for your business

PHP maintenance done properly. Upgrades, fixes, and performance improvements, with no shortcuts and no cowboy hacks.

Not sure which service you need?

Bugs & crashes

Your site is throwing errors, pages won't load, or something stopped working overnight. I find the cause and fix it cleanly, and most issues are resolved within a day.

I start by finding out what actually went wrong: what the error says, what changed recently, and what the site was doing when it failed. Then I fix the real cause instead of hiding the symptom. Common reasons are a recent update, a plugin that stopped working, a server that ran out of space, or an outside service that changed how it works.

  • →500 errors and white screens
  • →Broken forms and payment flows
  • →AI-generated code gone wrong
  • →Post-update breakage
  • →Memory leaks and performance bottlenecks
  • →Third-party API and integration failures

What you get: A working site, and a plain-English note of what went wrong and what I changed.

Something broken right now?

Tell me what's happening and I'll tell you if I can fix it. If I can't, you don't pay.

PHP version upgrades and modernisation

Running an old PHP version is a security risk and often the reason things start breaking. I handle the upgrade without taking your site offline.

Newer versions of PHP drop old features, so code written years ago can stop working after an upgrade. I check your site against the new version first, fix what would break, and test everything before your live site is switched over. What end of life means for your site, or check when your versions lose support on the EoL tracker.

  • →Version upgrades (PHP 5.6 → 8.4)
  • →Modern practices and coding standards
  • →Code audits and security reviews
  • →Version control setup and workflows

What you get: Your site on a supported PHP version, with a list of what changed.

Framework and CMS upgrades

Your original developer set it up, but now it's years out of date and nobody wants to touch it. I upgrade it safely, with a tested rollback plan.

Big upgrades are done one step at a time, with a full backup before each one. I check that your plugins and add-ons will still work before touching anything.

  • →Laravel and Symfony core upgrades
  • →WordPress, CraftCMS, Statamic updates
  • →Plugin and dependency audits
  • →Backup strategy implementation

What you get: An up-to-date site, a fresh backup, and a rollback plan.

Related: What to do when your web developer disappears

Database optimisation and performance tuning

If your site is slow or timing out under load, the problem is usually in the database. I find it and fix it.

I find out what is actually making the site slow before changing anything, then fix the biggest cause first. Extra speed boosts are only added where they will make a real difference.

  • →Query optimisation (MySQL, MariaDB, Postgres)
  • →Caching layers (Redis, OPCache, Memcached, Cloudflare)
  • →Queue workers (Redis, RabbitMQ, Amazon SQS)
  • →Load time reduction and bottleneck analysis

What you get: A faster site, and a short summary of what was slowing it down.

Deployment and monitoring

Deploying changes shouldn't be a nail-biting moment. I set up pipelines and monitoring so problems are caught before your customers see them.

A good setup checks every update automatically, puts it live the same way every time, and can undo it in one step. If something does break, you hear about it before your customers do.

  • →Shared hosting, VPS, and cloud infrastructure
  • →Containerisation (Docker, Kubernetes)
  • →CI/CD pipelines (GitHub Actions, GitLab CI)
  • →Error tracking and log monitoring

What you get: Updates that go live the same way every time, and an alert when something fails.

Not sure what you need?

Your website is down right now? Start with our emergency checklist →

Book a free consultation

Built with Cursor, Lovable, Bolt, Codex or Claude?

AI can write code fast, but architecture, scalability and maintainability are where it consistently falls short. This can be a problem under real traffic, edge cases, or when it needs to connect with the rest of your system. If you've built something with AI assistance, hired someone who did, or inherited a codebase that looks like it was written by a very confident AI agent, I can help.

What I fix

  • →Code that works in demo but breaks in production
  • →Security holes AI tools routinely miss
  • →No error handling, no logging, no tests
  • →Spaghetti structure that's impossible to extend
  • →Dependencies nobody updated or reviewed

What you get: An app that holds up under real use, with the weak spots found and fixed.

Related: Why you shouldn't rely on AI alone to fix broken code

Let's get your vibe-coded PHP app production-ready

Get a quote

Get your website back on track!

Tell us what's not working – the more details you share now, the faster we can help you with a clear solution.

Describe the issue, error message, or what you need fixed or upgraded. For longer messages, we recommend writing them elsewhere first and then copying them here.