Drupal is Open Source Content Management System(CMS) which means it is available for free to use but you still need to maintain Drupal sites and that is not FREE. Why is that? On simpler philosophical level the answer is “Time is Money”. Somebody has to apply these free updates and ensure that they do not break the site. Let us get into some details.
Of course one option would be to never update your site. This is like saying you never want to update your Windows or Anti-Virus software. It is simply not worth the risk. In best case scenario your site will be hacked and hacker could steal all the data. In worst case scenario hacker could turn your site into zombie site controlled by them and use it for all kinds of illegal purposes and increasing your liability. So what are the steps needed to update Drupal site?
Ten Basic steps for updating a Drupal Site:
1. Make a copy of current site in dev area
2. Apply all updates
3. Check for and fix any errors
4. Check for any functionality breaking on site
5. Backup current site files
6. Backup current site database
7. Take live site offline
8. Apply updates to live site and make same fixes as done on dev site
9. Go online with live site
10. Ensure all functionality on new site is still correct
How often are Drupal updates issued?
Drupal Core: Current official version in most popular use is Drupal 7. It was released on 5th Jan 2011. Since then up to end of the year 2014 there have been 34 updates released for Drupal core. So that translates to 8-9 updates per year. Or roughly update every 1-2 months.
Contributed Modules: Most projects have at least few dozen of contributed modules and on an average there are 2-3 updates released per month for these modules. Complex sites will have additional modules and accordingly possibly extra update releases.
So effectively there are at least few updates available every month for each site.
Not all updates are created equal
It is OK to wait for a while to apply some updates but security updates require immediate attention. Do keep in mind if you skip a few regular updates then applying updates becomes harder as the issued updates are not cumulative in nature and core updates might make some of modules incompatible thus requiring simultaneous updates of these modules.
How much effort it is to apply these updates?
Our experience is for most sites which are kept updated on regular basis this is about 1-2 hours of effort if you follow due diligence and do not skip any of the 10 steps for update outlined above.
What do we recommend?
We are full service Drupal Development house. For our clients we recommend a yearly maintenance plan which bills for 1-2 hours of work per month. We update sites on quarterly basis, unless there is security update which we take care of immediately. We have found this to be a cost effective solution for our clients.
Can I do my own updates?
Yes. Absolutely you can update your own sites. This is not Chip design, I think Chip design, my last job is much harder than Rocket Science 🙂
All information on updates is available online and you can certainly do this yourself, if you are so inclined. Do want to remind you the philosophical statement we started with “Time is Money”, if you do not do this for living, it will for sure take you longer than for your Drupal expert. And if you break the site, you might end up paying more in long run.