If your hoster is running a version of PHP that's that out of date, you need to find a new hoster. They are exposing your site to attack by not staying up to date. I wonder what else they haven't patched - Heartbleed, for example?