I have three sites running all fully patched and updated. Modules all written the 'proper' way (with a couple of small exceptions). The sites are all pretty much clones of each other.

There is a new site coming - I'm wondering whether I should upgrade them all to the latest version of 1.x ( at time of writing) and build the new site on that too. It will mean a lot of testing, the sites do brisk business.

I also wondering whether it's worth that effort or whether I should just use our existing codebase and launch the new site on patched Then focus the development effort on the migration to v2 (I'm aware that will be a much more serious project of course). The real question then is -

Is a fully patched less secure than

I'm not interested in any new features of, just whether running on patched buys me enough time to re-develop these sites on v2.

I'm interested to know any thoughts.

  • 1
    there is one rule = if it works then dont touch it. work on your Mv2 design, after you just upgrade your store and convert it to Mv2
    – MagenX
    Dec 30, 2015 at 13:08
  • @MagenX - Thanks, I love this comment. Very pragmatic, it's kinda what I wanted to hear too. I agree with the sentiment entirely.
    – McNab
    Dec 30, 2015 at 13:11
  • 1
    You are being a little bit pessimistic thinking your extensions + custom code will not be compatible after you upgrade to latest Magento. Try this on a dev server and see what happens.
    – Danny Z
    Jan 5, 2016 at 23:18
  • @DannyZ - You make a good point here. I think working with Magento for so long must have 'pessimised' me ;)
    – McNab
    Jan 6, 2016 at 10:03

1 Answer 1


First of all: Nice question!

I'd say a fully patched is as secure as a new As long as there are still security patches released for you're good to go with it.

So I think it makes sense to continue with and use the time to plan and develop your new shop with Magento 2.

  • Thanks very much for the answer Anna. I'm pleased this is your take on it, it reassures me. I am always seeing comments like 'You should upgrade', 'You need to upgrade' etc from users around the main SO site but nobody ever cites a source for why this should be the case. Cheers!
    – McNab
    Dec 30, 2015 at 16:16
  • 4
    Of course you should upgrade ;-) It makes also sense in terms of new features, bugfixes etc. But just from a security point of few a fully patched shop is ok too I think. Dec 30, 2015 at 16:20
  • i was waiting till someone will flag this question as duplicate... :)
    – MagenX
    Dec 31, 2015 at 9:35

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.