Due to someone leaving the company I work for I was handed the "webmaster" duties of a website hosted off-site running on Drupal 8.4.2. When I first logged in to the admin panel I discovered a host of problems, the most important one being the security updates. I first thought it wouldn't be much of a problem, as the hosting company has the handy interface to install and update/upgrade a number of web applications. But it turns out the that person before me installed Drupal manually (I have no idea why) so I'm wary of doing the "one click install" of Drupal 8.6.13. Furthermore, I don't know enough about Drupal to know if it would be a bad idea to update from 8.4.2 directly to 8.6.13. Would it be a better idea to first update to 8.5.14 and then to 8.6.13?

I've read through a lot of the release notes (8.5.0, 8.5.14, 8.6.0, 8.6.13, & a few others in that range) so I'm aware of the need to upgrade to PHP 7.3. I'm also very comfortable with the command line (it's running on Linux) and I've read (and re-read) the Drupal docs for updating via the command line.

I contacted the hosting provider with this same question but their "yeah, it'll be fine" answer to using their "one-click installer" wasn't very reassuring, so I thought I'd pose the question here before I take the plunge. Thanks for any words of advice or warning.

  • download a copy and try the updates locally before you do anything in production. – blu Mar 29 '19 at 20:32
  • Thanks. That did cross my mind earlier. Perhaps I'll bring in my Linux laptop from home on Monday and give that a shot. – Mike Benchoff Mar 29 '19 at 20:36
  • Update straight, you'll be fine. – No Sssweat Mar 30 '19 at 3:56
  • You might also want to consider composerizing your drupal installation but do so in a controlled environment (testing server or your local computer) drupal.stackexchange.com/questions/258452/…. This will help you save time with updates in the future. – GiorgosK Mar 30 '19 at 8:01
  • Keep i mind that Drupal 8.4.2 predates SA-CORE-2018-002 and SA-CORE-2018-004. If your site is public, there is a chance it is compromised. – mpdonadio Apr 1 '19 at 18:58

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.