As we get closer to the November 2022 "End-Of-Life" date for Drupal 7, I've noticed a lot of the same questions coming up. So, I'm going to try to make this blog post a bit of an "FAQ" that you can refer to with questions - and if any are missing, please add a comment at the bottom of the post. To start with, I'm going to break it into two sections: working vs. not-working sites.
As you may already be aware, the Drupal Community is supporting Drupal 7 through November of 2022! This means your organization can remain free of most of the worst issues that could hit your website - as long as you do all of the updates. If you would rather not stress about such things: read on!
by Elliot Christenson on December 2, 2020 - 11:00pm
Last Wednesday, November 25th, 2020 was a security update that impacted Drupal 8, Drupal 7, and even Drupal 6 "LTS". Hundreds of thousands of website operators need to immediately update their websites! A huge percentage of them are not "web developers". Many don't even know they need the update!
Drupal isn't known for its ease of use for site owners. It's come a long way, but it remains difficult for most. That's expected and sometimes even exciting for Drupal developers.
What about the (non-developer) site owner? We don't believe your site should be left vulnerable. We believe you should be able to "just chill" rather than stress about your Drupal site security!
Read on for a peek behind the curtain to see what the Wizards do so you don't have to.
As you may know, Drupal 6 has reached End-of-Life (EOL) which means the Drupal Security Team is no longer doing Security Advisories or working on security patches for Drupal 6 core or contrib modules - but the Drupal 6 LTS vendors are and we're one of them!
Today, there is a Critical security release for Drupal core to fix a Remote Code Execution (RCE) vulnerability. You can learn more in the security advisory:
If you have a Drupal 6 site, we recommend you update immediately! We have already deployed the patch for all of our Drupal 6 Long-Term Support clients. :-)
FYI, there were other Drupal core security advisories made today, but those don't affect Drupal 6.
If you'd like all your Drupal 6 modules to receive security updates and have the fixes deployed the same day they're released, please check out our D6LTS plans.
Note: if you use the myDropWizard module (totally free!), you'll be alerted to these and any future security updates, and will be able to use drush to install them (even though they won't necessarily have a release on Drupal.org).
by Elliot Christenson on November 5, 2020 - 12:33am
This is a bit of an update to our update to PHP 7 that we did awhile back.
Last week we contacted all of our clients to announce our PHP 7.4 upgrade plans.
Much like the update to accomodate PHP 7, this update will necessitate some changes for some of our Drupal 6 clients.
Thankfully the scope of changes seems to be a bit smaller so far.
The important thing to note is that we are continuing to make changes to keep Drupal 6 and important contrib modules current with modern, supported (and secure) versions of PHP!
Drupal 7 was released on January 5, 2011. It's nearly 10 years old and going strong! Drupal 8 was released on November 19, 2015 which itself is nearly 5 years old!
Where do our legacy and most used Drupals stand? Read on...
As you may know, Drupal 6 has reached End-of-Life (EOL) which means the Drupal Security Team is no longer doing Security Advisories or working on security patches for Drupal 6 core or contrib modules - but the Drupal 6 LTS vendors are and we're one of them!
Today, there is a Moderately Critical security release for Drupal core and CTools to fix a Cross-Site Scripting (XSS) vulnerability. You can learn more in the security advisory:
If you have a Drupal 6 site, we recommend you update immediately! We have already deployed the patch for all of our Drupal 6 Long-Term Support clients. :-)
FYI, there were other Drupal core security advisories made today, but those don't affect Drupal 6.
If you'd like all your Drupal 6 modules to receive security updates and have the fixes deployed the same day they're released, please check out our D6LTS plans.
Note: if you use the myDropWizard module (totally free!), you'll be alerted to these and any future security updates, and will be able to use drush to install them (even though they won't necessarily have a release on Drupal.org).
by Elliot Christenson on September 1, 2020 - 6:20pm
In November 2022, Drupal 7 will be End-of-Life (EOL). To continue getting security updates, you'll need to get Extended Support (D7ES). But if you sign up before EOL, you'll get automatic security updates until then AND a better price when EOL comes.
by Elliot Christenson on August 12, 2020 - 11:37pm
Your Drupal 7 site is working great, and it is powering important parts of your infrastructure. You need it to work safely, securely, and with a minimum of staff - especially now! myDropWizard has your back.
There are a number of sad and scary issues facing all of us, but working together we can solve any problem. myDropWizard would like to be a piece of the puzzle in helping your organization navigate the uncertainty of 2020 and beyond.