@coriander there are lots of very old PHP websites

there is a very old vulnerability in PHP which lets people do whatever they want with your server

there are only patches for newer PHP versions. updating from an old version to a new version is not trivial

websites which cannot immediately upgrade because they are on too old of a version are recommended to go offline