I have three sites running all fully patched and updated. Modules all written the 'proper' way (with a couple of small exceptions). The sites are all pretty much clones of each other.

There is a new site coming - I'm wondering whether I should upgrade them all to the latest version of 1.x ( at time of writing) and build the new site on that too. It will mean a lot of testing, the sites do brisk business.

I also wondering whether it's worth that effort or whether I should just use our existing codebase and launch the new site on patched Then focus the development effort on the migration to v2 (I'm aware that will be a much more serious project of course). The real question then is -

Is a fully patched less secure than

I'm not interested in any new features of, just whether running on patched buys me enough time to re-develop these sites on v2.

I'm interested to know any thoughts.

  • 1
    there is one rule = if it works then dont touch it. work on your Mv2 design, after you just upgrade your store and convert it to Mv2 – MagenX Dec 30 '15 at 13:08
  • @MagenX - Thanks, I love this comment. Very pragmatic, it's kinda what I wanted to hear too. I agree with the sentiment entirely. – McNab Dec 30 '15 at 13:11
  • 1
    You are being a little bit pessimistic thinking your extensions + custom code will not be compatible after you upgrade to latest Magento. Try this on a dev server and see what happens. – Danny Z Jan 5 '16 at 23:18
  • @DannyZ - You make a good point here. I think working with Magento for so long must have 'pessimised' me ;) – McNab Jan 6 '16 at 10:03

First of all: Nice question!

I'd say a fully patched is as secure as a new As long as there are still security patches released for you're good to go with it.

So I think it makes sense to continue with and use the time to plan and develop your new shop with Magento 2.

  • Thanks very much for the answer Anna. I'm pleased this is your take on it, it reassures me. I am always seeing comments like 'You should upgrade', 'You need to upgrade' etc from users around the main SO site but nobody ever cites a source for why this should be the case. Cheers! – McNab Dec 30 '15 at 16:16
  • 4
    Of course you should upgrade ;-) It makes also sense in terms of new features, bugfixes etc. But just from a security point of few a fully patched shop is ok too I think. – Anna Völkl Dec 30 '15 at 16:20
  • i was waiting till someone will flag this question as duplicate... :) – MagenX Dec 31 '15 at 9:35

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.