The verdict in three sentences
An application on PHP 5.6 has not received a security patch since 2019: every passing month raises both the risk and the cost of the takeover. The right sequence is almost always a takeover audit (EUR 3,000 to 6,000), then an upgrade to PHP 8.3 (EUR 15,000 to 35,000), and only after that a discussion about rewriting. Rewriting straight away for EUR 60,000 to 120,000 without knowing the existing code means paying twice for business rules nobody documented.
The takeover audit: what it must deliver
A serious new vendor refuses to price maintenance or a rebuild without reading the code. The takeover audit takes 4 to 8 days and underpins every decision that follows.
| Audit deliverable | Content | Indicative effort | Why it matters |
|---|---|---|---|
| Technical inventory | PHP, MySQL, library and server versions | 0.5 day | Spot unsupported components |
| Functional map | Screens, business rules, batch jobs | 1 to 2 days | Replaces the missing documentation |
| Security review | SQL injection, passwords, access | 1 to 1.5 days | PHP 5.6 piles up known flaws |
| Code quality | Duplication, test coverage, debt | 1 to 2 days | Prices the migration accurately |
| Access recovery | Hosting, DNS, repository, backups | 0.5 day | Often held by the former freelancer |
| Costed recommendation | Migration or rewrite scenarios | 1 day | A reasoned decision for management |
The most underestimated point is access recovery. If the domain name or hosting is in the freelancer's name, settle that before any other spending.
Migrate, rewrite or maintain: the three scenarios
| Scenario | Budget (2026 order of magnitude) | Timeline | Risk | When to choose it |
|---|---|---|---|---|
| Keep as is + hardening | EUR 4,000 to 8,000 | 2 to 4 weeks | High in the medium term | App to be retired within 12 months |
| Upgrade to PHP 8.3 | EUR 15,000 to 35,000 | 2 to 4 months | Medium | Solid business rules, salvageable code |
| Upgrade + move to a framework (Symfony, Laravel) | EUR 35,000 to 60,000 | 4 to 6 months | Medium | Frequent changes planned |
| Full rewrite | EUR 60,000 to 120,000 | 6 to 12 months | High (scope) | Unusable code, changed business need |
| Replace with off-the-shelf software | EUR 10,000 to 40,000 + licences | 3 to 6 months | Medium | Standard process, few specifics |
Once the application is stable, application maintenance (TMA) costs EUR 800 to 2,000 a month depending on included hours, monitoring and guaranteed response time.
Reversibility, so this never happens again
A freelancer leaving without documentation is a contractual problem before it is a technical one. The new contract should provide code ownership in your name, a Git repository you administer, hosting accounts in your name, minimum documentation updated with every delivery and a costed reversibility clause (3 to 5 days of knowledge transfer at contract end). These clauses cost almost nothing at signature and spare you another EUR 5,000 audit three years from now.
Mini case study
Markus, managing director of an industrial maintenance SME in Frankfurt (45 staff), has used a PHP 5.6 job-scheduling application since 2014. The freelancer has left and the host is threatening to switch off old PHP versions.
Need a professional website?
Kolonell builds websites that attract clients, optimized for the Sénégalese market. Free quote in 2 minutes.
- Takeover audit: 5 days at EUR 750, i.e. EUR 3,750.
- Finding: salvageable code, 60 % of business rules reusable.
- PHP 8.3 upgrade with automated tests: EUR 26,000, instead of a rewrite estimated at EUR 85,000.
- Maintenance: EUR 1,200 a month, i.e. EUR 14,400 a year.
- Saving versus the rewrite: 85,000 - (3,750 + 26,000) ≈ EUR 55,000, enough to fund 3.8 years of maintenance.
FAQ
How much does a PHP application takeover audit cost in 2026?
Budget EUR 3,000 to 6,000 for 4 to 8 days. The price depends on codebase size and the number of business modules.
Can we keep PHP 5.6 for a few more years?
It is risky: no patches since 2019 and many hosts charge extra or refuse these versions. Minimal hardening at EUR 4,000 to 8,000 only buys 6 to 12 months.
How long does an upgrade to PHP 8.3 take?
Between 2 and 4 months for a mid-sized application, tests included. The budget sits between EUR 15,000 and 35,000.
What should a maintenance contract include?
A monthly hours allowance, a response time (often 4 business hours for a blocking issue), monitoring and reversibility. The going rate is EUR 800 to 2,000 a month.
How do we recover the code if the former freelancer does not answer?
Start with the hosting: the code runs on the server and can be copied if you have access. The original contract and invoice prove your right of use, to be confirmed by a lawyer if needed.
Let's scope your project. Give us access to your application and its usage volumes: we will frame the takeover audit, the migration scenario and a maintenance budget. Detailed quote within 48 h. WhatsApp +221 77 596 93 33.
Mohamed Bah
Fondateur, Kolonell
Passionate about digital and entrepreneurship in Africa, Mohamed has been helping Sénégalese businesses with their digital transformation since 2020. Founder of Kolonell, he believes every SME deserves a professional and accessible online présence.
