Magento have just released version 1.9.1 which includes several cool features and security updates.
While the new features may be tempting and you should never overlook security updates, hold back for a few moments.
Literally in the past 20 minutes I’ve had 3 emails and 2 skype conversations with users that have had issues updating (two had 403 errors after updating, one was an extension issue and not entire sure on the others yet).
Putting this into perspective for a few moments
We’re in late November, things are getting busy, this week we are seeing Black Friday & Cyber Monday.
The security updates are important.
I’m not a security expert, from from what I can tell (and you should read them too here), the first is poorly configured permissions and the file needed to be uploaded in the first place, the same for the XML exploit, 3 of them are administration based (you need to be logged in first) and the other two are cosmetic (ish).
Should You Upgrade?
I can’t stress the importance of having a backup first.
Ultimately that’s your decision whether to update right now. If you are going to make an upgrade, do make a backup first!
As always 99.9% of the time you will never need it, but for the 0.01% it will save your bacon. The video tutorial on how to make a backup of Magento in a 3-4 clicks is here:
Thankfully the ALL of the people that contacted me were well educated and had backups. +1 for no-nonsense tutorials! Plus I’m sure that the majority would have updated successfully, I wouldn’t have heard about those :)
There are a collection of new features in this update, the one that is of most interest (the others are a bit nerdy to be honest), is the “Configurable Swatches”.
See here for more info http://www.magentocommerce.com/knowledge-base/entry/ee1141-ce191-configurable-swatches
If this gets close to what you can do in the paid for extensions, this is going to be happy days! (as some of them are over $80! which is why we’ve not suggested them).
A screenshot of them in action is below:
And yes, expect a tutorial on this for you shortly.
Without a doubt you should update Magento, the two points I’d like to stress are:
- This could probably wait a couple of days
- Make sure you have a backup!
An additional point that I missed when writing the original article is that there isn’t an update for the Responsive Ultimo theme for magento yet.
As this is likely to need some minor styling alterations for the new configurable swatches, that would be another reason to hold off on the update.
PS. I’ve just been playing with the swatches in 1.9.1 and they’re sick!