Upgrading to vb4/vb5

[theforumist]

I've been living in the stone age of vB software, v3.8.x, as it has served me very well over the years. But alas, it has come to the point where I need to restructure my site and in turn upgrade my forum software. My question to you community, is which version would you guys recommend I upgrade to?

Blogs will be a nice addition to my site as well as a CMS/Portal. I run/ran a chatbox and forum stats. The new staff I'm bringing on have limited knowledge of CMS and/or forums and few have seen the inside of a ModCP/AdminCP.

Opinions?

[Max Taxable]

5 is still in beta. I'd recommend staying away from it for the time being.

I think you're going to regret going to v4. If your 3.8.X is working well, and your community is happy with it, what is the compelling reason to upset the apple cart? Personally I will NEVER "upgrade" my 3.8 to v4. It's hardly "stone age."

[ForceHSS]

If you are only upgrading to get the cms and blogs don't stay as u are

[theforumist]

Then let me pose this second question to you guys then. I think the latest version I have is 3.8.3/4...what is the latest version of 3.8 available and is it still being updated or not? I have all of my mods stock piled and have no problem digging around for available 3.8 templates.

Just looking to give my community the best possible experience.

[Digital Jedi]

Keep in mind, we still have a few vB licence holders that don't care for vB4 as forum software, but as a preference. Not because it's particularly bad, but because it had a bad introduction. 3.8 is great. I love it, too. But as a point of nostalgia. 4.2 is more modern and is more compliant with modern web standards. Not to contradict Max's statement above, but I would consider 3.8 "stoneage" in the sense that it was originally designed when certain web standards hadn't been fully adopted yet. Most users of 3.8 will start running into issues when modern web browsers, search engines and modifications start adopting more modern tactics. It's fine to use now. I use it now. But only because I can't afford to purchase a new license. As a forum admin, unless you're especially adept at patching and fixing things, you may find yourself forced to upgrade to meet the web's demands in the not-too-distant future.

[theforumist]

Originally Posted by Digital Jedi

Keep in mind, we still have a few vB licence holders that don't care for vB4 as forum software, but as a preference. Not because it's particularly bad, but because it had a bad introduction. 3.8 is great. I love it, too. But as a point of nostalgia. 4.2 is more modern and is more compliant with modern web standards. Not to contradict Max's statement above, but I would consider 3.8 "stoneage" in the sense that it was originally designed when certain web standards hadn't been fully adopted yet. Most users of 3.8 will start running into issues when modern web browsers, search engines and modifications start adopting more modern tactics. It's fine to use now. I use it now. But only because I can't afford to purchase a new license. As a forum admin, unless you're especially adept at patching and fixing things, you may find yourself forced to upgrade to meet the web's demands in the not-too-distant future.

Good bit of info. Didn't really look into the new web standards. I'm far from knowledgeable when it comes to web development so I'm not in the loop when it comes to new standards. Thanks for that update. I'll see where my plans go. I might hold on to my 3.8 license for another site I'm planning on doing and getting a 4.x license for my current one.

Thank you!

[Max Taxable]

Originally Posted by theforumist

Then let me pose this second question to you guys then. I think the latest version I have is 3.8.3/4...what is the latest version of 3.8 available and is it still being updated or not? I have all of my mods stock piled and have no problem digging around for available 3.8 templates.

Just looking to give my community the best possible experience.

3.8.7 is latest... 3.8.8 addresses some of the issues DJ points out including the newest PHP version which has some problems with version 3. Version 3 is NOT supported anymore by vBulletin. But, what does it need actually? Not anything I know about or can think of.

I am sticking with version 3 until they pry it out of my cold, dead hands. DJ says there's nothing really wrong with version 4, but of all vBulletin versions ever, it is by far the worst on security - it's getting hacked all the time, and with new exploits popping up all the time. I believe it is inherently flawed. vB4 is the devil.

I believe you'll rue the day you ever leave version 3.

Originally Posted by theforumist

I might hold on to my 3.8 license for another site I'm planning on doing and getting a 4.x license for my current one.

Thank you!

Keep in mind that when you buy a new v4 or v5 license, you still can download and use version 3, on that license.

[Digital Jedi]

Originally Posted by Max Taxable

I am sticking with version 3 until they pry it out of my cold, dead hands. DJ says there's nothing really wrong with version 4, but of all vBulletin versions ever, it is by far the worst on security - it's getting hacked all the time, and with new exploits popping up all the time. I believe it is inherently flawed. vB4 is the devil.

To that point, I think all the hacking that's been going on lately has been a little misleading. It's a mistake to think something's more secure only because it hasn't been hacked a lot lately. vB3 probably has more security vulnerabilities than vB4. It's unsupported, older software that is no longer being patched or developed. That, in of itself, is going to be one of the problems admin experience in the coming years. But it's not a popular target. There are still fewer vB3 boards out than the combined vB4 and 5 boards. Their going to look for the more common vulnerability. The one that will get them into the most sites. The one that will do the most damage. (Which is why WordPress and Joomla are the most hacked scripts out there right now.) vB3 just isn't interesting right now to them, but that doesn't mean it's more secure. Logically, nothing is more secure once development stops. Liken it to anyone trying to use Netscape to browse the web today. You probably won't run into a lot of people targeting Netscape. But you'd be taking a huge risk using it as your main browser. vB3 is not to that point yet. But it will be. And in not too short a time.

[Max Taxable]

Originally Posted by Digital Jedi

To that point, I think all the hacking that's been going on lately has been a little misleading. It's a mistake to think something's more secure only because it hasn't been hacked a lot lately. vB3 probably has more security vulnerabilities than vB4. It's unsupported, older software that is no longer being patched or developed. That, in of itself, is going to be one of the problems admin experience in the coming years. But it's not a popular target. There are still fewer vB3 boards out than the combined vB4 and 5 boards. Their going to look for the more common vulnerability. The one that will get them into the most sites. The one that will do the most damage. (Which is why WordPress and Joomla are the most hacked scripts out there right now.) vB3 just isn't interesting right now to them, but that doesn't mean it's more secure. Logically, nothing is more secure once development stops. Liken it to anyone trying to use Netscape to browse the web today. You probably won't run into a lot of people targeting Netscape. But you'd be taking a huge risk using it as your main browser. vB3 is not to that point yet. But it will be. And in not too short a time.

But first and foremost, the one which is easiest.

Problem with your missive is, before v4 when v3 was king... It was a rare thing even then to see a v3 site defaced/hacked. It's simply, inherently, more secure than v4.

Side note: I've had a Joomla installation online for almost ten years now, never upgraded it or anything - and it hasn't been touched. It is fronting a v3 installation that's been there for the same amount of time, nothing's happened. I think that one is still a 3.5.4 or some such.

For the script kiddie (which is 99% of this "hacking" that goes on) easy access and vulnerability is key. These aren't actual, black hat hackers here - these are goofs looking for "street cred" and any site will do.

The actual, black hat hacker won't be stopped no matter your security.

[TheLastSuperman]

This thread has some good opinions and input as well, similar subject - https://vborg.vbsupport.ru/showthread.php?t=303713