Take the 2-minute tour ×
Joomla Stack Exchange is a question and answer site for Joomla! administrators, users, developers and designers. It's 100% free, no registration required.

Is there any secure version of the old Joomla! 1.6.x, or the 1.7.x series available?

share|improve this question
add comment

2 Answers 2

up vote 3 down vote accepted

Short and long answer is no. You need to upgrade a 1.6 or 1.7 site to at least 2.5.x as that is the most secure version (although 2.5 is fast approaching end-of-life). If you have a compatible template, you might be able to upgrade to 3.3.

share|improve this answer
2  
To add to this, anything before 2.5.14 is at an extremely high security risk (to the point a 1.5 patch was created after it was out of support). Follow the advice here and update to the latest 2.5 release, and begin planning for 2.5 support ending if not already. –  Michael May 5 at 0:13
add comment

Any Joomla website and to extend this a bit, any kind of software, especially open source ones and those that are publicly exposed, should be up to date, to ensure maximum security.

Joomla's current maintainable versions are Joomla 2.5 and Joomla 3.3. Joomla 1.6 and 1.7 were short term releases and we could say they were like the path from version 1.5 to 2.5. They were meant to stay for long, they are not maintained (= no security patches, no bug fixes), thus they can't be used any more on production.

The updates, apart of the fact that they may add new features, they deal with any known vulnerabilities. Those vulnerabilities are well-known to the public, therefore an older version of the software can easily be compromised.

Another condition, we should have in mind, is that 3rd party extensions are not also maintained for such older versions, giving even more space to vulnerabilities and other possible incompatibilities with the server software.

Usually, upgrading from 1.6, 1.7 to 2.5 and 3.3 is kind an easy task. But keep in mind that this is dependent on the specific conditions of each website, the 3rd party extensions and the possible level of customization and

It is strongly recommended to not try to upgrade directly on the live website, and always keep a working backup of the website.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.