Keeping your forum software updated

Why updates matter more for forums

A forum is a web application that lets strangers create accounts, upload files and write content. That makes it a target. Most compromised forums weren’t attacked cleverly; they were running a version with a publicly known, already-fixed hole. Updating promptly closes that door.

Updates also keep your forum compatible with current PHP versions, which matters because old PHP versions stop receiving security fixes of their own.

Two kinds of update

• Maintenance and security releases within a series (for example phpBB 3.3.x, MyBB 1.8.x, SMF 2.1.x). Small, low-risk, and important. Apply them within days.
• Major versions (a new series). Bigger changes, and themes and add-ons may need their own updates. Wait until your add-ons support it, then plan it for a quiet evening.

How to hear about releases

• Your admin panel: phpBB, MyBB and SMF each show on the admin front page when a newer version exists. Glance at it whenever you log in.
• Official announcements: the phpBB blog, the MyBB blog and the SMF news board.
• Softaculous: it can email you when an update is available for an installation.

The fifteen-minute update routine

1. Read the release notes. Is it a security release? Does it need a newer PHP version?
2. Check your add-ons. Look at your list of installed themes and add-ons and confirm they support the new version. For a security release inside the same series, they almost always do.
3. Back up files and database. Backing up your forum. Softaculous also offers to take a backup as part of the upgrade.
4. Update. In Softaculous, open your installations list and use the upgrade option for the forum. Alternatively, follow the software’s own update instructions.
5. Test the things members do most: log in, read, post, reply, register a test account, view on a phone.
6. Re-enable anything the update process disabled (phpBB may ask you to re-enable extensions; SMF may ask you to reinstall some packages after a major upgrade).

Should you turn on automatic updates?

For minor versions, usually yes: Softaculous can apply them for you, which means security releases don’t wait for you to notice. For major versions, no: they’re the ones that can break a theme or add-on, and you want to choose the moment. If you’ve heavily customised templates or installed file-editing SMF packages, consider leaving even minor updates manual and following the routine above promptly.

PHP versions

Traxio offers PHP 7.4 to 8.3, switchable per domain in DirectAdmin. Newer is generally faster and safer, but only move to a version your forum software and add-ons support. The PHP section of the knowledgebase explains how to switch.

If a forum has gone unupdated for years

Don’t jump straight to the latest version. Back up, then follow the software’s documented upgrade path, which may involve intermediate versions. For an old forum you’re moving to Traxio, it’s often easiest to move it first as it is, then upgrade on the new hosting where you can switch PHP versions as needed.