PHP app with no upgrades in 8 years? Jheez, that sounds like a black hat hacker's dream...