VB4 vs VB3
 

With all the recent security issues VB4 has been having, is it really worth upgrading a VB3 forum to VB4 ? More features dont really matter to me, its the security that matters.

VB3 has had no security advisories recently but VB4 has had tons.

Offcourse you should upgrade, it's very easy also unless you have some styles that only work on v3

I always upgrade even if there is a small incremental upgrade, feels safe

I think you have already answered your own question.

There's two things about this, at least for me but if you think about it, maybe for you too.

1.) There is NO compelling reason to go to vB4. None at all. It's not demonstrably better, there's nothing about it that just pops and makes you say "gotta have it."

2.) Once you "upgrade" to vB4, it is a major undertaking to ever go back.

I am never, ever giving up my 3.8.x, they will have to pry it from my cold, dead hands.

That's the spirit!
I fully understand you. ;)


I think that some interesting summary of the things can be found in wikipedia -> http://en.wikipedia.org/wiki/VBulletin . After reading this article it's getting much clearer what differs in vb3 and vb4 and who developed vb3 and who is developing vb4. As per user experience typing in Google "vb3 vs vb4 vBulletin" is the way to get an idea.

Yes I am well aware of that situation but it's not really one of my qualms about vB4. But, definitely good information for the OP to have.

Steam's VB3 forum was recently hacked and rather then upgrading it to VB4, they kept it as VB3.

How's that for proof that VB3 is more desirable. Valve is huge.

To me it's not a question of if vB3 is more desirable, the fact that vB4 is not necessarily more desirable, is the deal.

It's a pain in the rear to upgrade in any event, even to newer versions of 3. Therefore there should be some compelling reason to upgrade, and right now there just isn't one.

Imho that Steam forum case doesn't says much about what's more secure and bulletproof. More information would be needed to judge it, for example what was running the server, which mods/addons were installed, directory permissions.. there are really plenty of things to consider. I would look more on average of all forums, if we would compare 1000 of exploited forums then this numbers could say something. Anyway, everything can be exploited if it's not secured well and even if it is there will always be some units with the knowledge and abilities to do it. As per logical point of view, vb3 is not developed any more, vb4 is, this means there will be new code added with every upgrade, this means if a coder make mistake there is possibility of new hole, it's easy and logical, isn't it? If you're interested in some new features that gives you vb4 then I think upgrading is desirable, if vb3 gives you everything you need then why fix something that is not broken?

Just my thoughts...

The two best reasons to upgrade are...

1) vB3 is no longer being developed and only security patches are being released when they are needed. You won't see any new features added.

2) At some point vB3 will reach 'End of Life' and no longer be supported even if a security patch is needed.