Inheriting code.
WHAT TO ESTABLISH FIRST
What it does
What it runs on: PHP version, framework, dependencies
Where it is deployed Where the database is Who else has access
WHAT TO DO IMMEDIATELY
Take a full backup of files and database Change every credential you control Review who has access
WHY THE CREDENTIALS
You do not know who holds them.
WHAT TO ASSESS
Whether it is under version control Whether there are tests Whether it is documented Whether dependencies are current Whether the PHP version is supported
WHAT YOU WILL USUALLY FIND
No version control, no tests, outdated dependencies, no documentation.
WHAT TO DO FIRST
Put it under version control, exactly as found.
WHY
So every subsequent change can be traced and reversed.
WHAT TO DO SECOND
Create a copy you can break, separate from production.
WHAT NOT TO DO
Change anything on production before you understand it.