Securing Magento 1.8.1.0 Patch or Upgrade?

[magento5050]

Hi

I am trying to help someone who is currently running Magento 1.8.1.0. The store owner's knowledge of Magento is very limited, and our main concern is the security of the current installation.

We have Magento running behind an Incapsula firewall. Will Incapsula protect against vulnerabilities such as the Zend Framework exploit. Will the firewall protect against the Magento installation not having the latest patches installed?

Is it advisable in order to secure the Magento installation to upgrade to version 2, or will patching the current version 1.8.1.0 be enough?

Thanks in advance.

[Damian Culotta · Accepted solution]

@magento5050,

I guess that the first step is to patch your current installation/version. You'll find all the patches for that version.

Then if you like, you can upgrade to the latest 1.x version (but with patches you'll be ok) (for the moment, of course).

An upgrade to Magento2 isn't the same as changing of version on Magento1. You need to think that upgrade as a replatform.