Is it worth database upgrading?

SSTTweb

Newbie
Joined
May 27, 2021
Messages
20
Reaction score
8
I am running WordPress.

I'm thinking of upgrading from MySQL 5.7 to MariaDB 10.3.

However, I am worried that the site may break down.

WHM says that downgrade is not supported.

All I can do is to trust a fate?

Is it worth upgrading?

Please advice.
 
I am running WordPress.

I'm thinking of upgrading from MySQL 5.7 to MariaDB 10.3.

However, I am worried that the site may break down.

WHM says that downgrade is not supported.

All I can do is to trust a fate?

Is it worth upgrading?

Please advice.
If you don't know what you are doing. Don't.

Get a sysadmin. Back up your db and migrate.

And upgrading is definitely worth it. MySQL 5.7 is literally near end of life. It will be officially discontinued by oracle in Oct 2023. There's already 30 CVEs for 5.7.

Upgrade asap. But get help if you don't know what you are doing.
 
If you don't know what you are doing. Don't.

Get a sysadmin. Back up your db and migrate.

And upgrading is definitely worth it. MySQL 5.7 is literally near end of life. It will be officially discontinued by oracle in Oct 2023. There's already 30 CVEs for 5.7.

Upgrade asap. But get help if you don't know what you are doing.
Oracle may discontinue it but it’s still going to work after that date. I’d say don’t rush. If you don’t know what your doing just leave it like it is now.
 
While there's dozens of CVEs (vulnerabilities) for 5.7.xx, they are nothing to worry about with Wordpress. They're high privilege vectors — anyone gaining access to those on any version would be trouble. Use strong passwords all around, don't get phished, and you'll be fine.

Any version becoming unsupported won't affect you at all. You could run it for yeeears after Oracle drops it.

Upgrading won't give you any big performance boosts.

If you really want to upgrade, you are best off paying a freelancer $10-15 to upgrade for you, since you could lose your databases. Just make sure you/they backup before they touch anything.
 
While there's dozens of CVEs (vulnerabilities) for 5.7.xx, they are nothing to worry about with Wordpress. They're high privilege vectors — anyone gaining access to those on any version would be trouble. Use strong passwords all around, don't get phished, and you'll be fine.
This is dangerous advice, please refrain from advising people about things that you are not sure about.

The number #1 reason why any website gets hacked is because outdated system software like databases.

And no, just because databases are high privilege vectors doesn't mean you should not update your outdated db asap.

That's cause privilege escalation is a thing. And MySQL 5.7 has a vulnerability that allows that.
https://vulners.com/exploitdb/EDB-ID:40679
If you use 5.7, you are simply lucky that you have not been hacked yet. All it takes is a malicious php script that executes some code.

Any version becoming unsupported won't affect you at all. You could run it for yeeears after Oracle drops it.
A version becoming unsupported means you won't get any essential security patches. If you don't update your db after deprecation, you are just looking forward to lot of pain and downtime in the event of a security incident.

Say a critical Zero-day that can hack any website comes out after a week 5.7 gets deprecated. To prevent that Zero-day from working on your machine, you need a security patch. Which 5.7 won't get. Installing a security patch is way easier than migrating your database to a new version.

Upgrading won't give you any big performance boosts.
False yet again. The next major release after 5.7 is MySQL 8.0.

MySQL 8.0:
- uses an encoding format called UTF8M4. This alone is 20 times faster than mysql5.7

- has new performance schemes that support upto 100 indexes. This speed up indexes significantly.

- has fixed a memory leak that existed in 5.7. 8.0 in general often used less memory than 5.7

- has a new query optimiser that takes into consideration i/o cost.

- oracle claims 8.0 is upto 2x times faster on most queries compared to 5.7.
https://www.mysql.com/products/enterprise/database/
Oracle literally skipped MySQL6 and MySQL7 just because they had all these new features.
 
This is dangerous advice, please refrain from advising people about things that you are not sure about.

The number #1 reason why any website gets hacked is because outdated system software like databases.

And no, just because databases are high privilege vectors doesn't mean you should not update your outdated db asap.

That's cause privilege escalation is a thing. And MySQL 5.7 has a vulnerability that allows that.
https://vulners.com/exploitdb/EDB-ID:40679
If you use 5.7, you are simply lucky that you have not been hacked yet. All it takes is a malicious php script that executes some code.


A version becoming unsupported means you won't get any essential security patches. If you don't update your db after deprecation, you are just looking forward to lot of pain and downtime in the event of a security incident.

Say a critical Zero-day that can hack any website comes out after a week 5.7 gets deprecated. To prevent that Zero-day from working on your machine, you need a security patch. Which 5.7 won't get. Installing a security patch is way easier than migrating your database to a new version.


False yet again. The next major release after 5.7 is MySQL 8.0.

MySQL 8.0:
- uses an encoding format called UTF8M4. This alone is 20 times faster than mysql5.7

- has new performance schemes that support upto 100 indexes. This speed up indexes significantly.

- has fixed a memory leak that existed in 5.7. 8.0 in general often used less memory than 5.7

- has a new query optimiser that takes into consideration i/o cost.

- oracle claims 8.0 is upto 2x times faster on most queries compared to 5.7.
https://www.mysql.com/products/enterprise/database/
Oracle literally skipped MySQL6 and MySQL7 just because they had all these new features.

Great advice. This ^ OP
 
This is dangerous advice, please refrain from advising people about things that you are not sure about.

The number #1 reason why any website gets hacked is because outdated system software like databases.

And no, just because databases are high privilege vectors doesn't mean you should not update your outdated db asap.

That's cause privilege escalation is a thing. And MySQL 5.7 has a vulnerability that allows that.
https://vulners.com/exploitdb/EDB-ID:40679
If you use 5.7, you are simply lucky that you have not been hacked yet. All it takes is a malicious php script that executes some code.


A version becoming unsupported means you won't get any essential security patches. If you don't update your db after deprecation, you are just looking forward to lot of pain and downtime in the event of a security incident.

Say a critical Zero-day that can hack any website comes out after a week 5.7 gets deprecated. To prevent that Zero-day from working on your machine, you need a security patch. Which 5.7 won't get. Installing a security patch is way easier than migrating your database to a new version.


False yet again. The next major release after 5.7 is MySQL 8.0.

MySQL 8.0:
- uses an encoding format called UTF8M4. This alone is 20 times faster than mysql5.7

- has new performance schemes that support upto 100 indexes. This speed up indexes significantly.

- has fixed a memory leak that existed in 5.7. 8.0 in general often used less memory than 5.7

- has a new query optimiser that takes into consideration i/o cost.

- oracle claims 8.0 is upto 2x times faster on most queries compared to 5.7.
https://www.mysql.com/products/enterprise/database/
Oracle literally skipped MySQL6 and MySQL7 just because they had all these new features.
I knew someone would say something — which isn't a bad thing.

I'm 20 years full-stack, blue team consultant, and specialize in optimization (as well as MySQL). I would never tell anyone to forgo security measures when it really matters. This is a simple Wordpress site. Nothing to worry about here. This is not anyone's target, a script kiddie wouldn't even waste their time.

MySQL 5.7 is still a sound version for this application, and still used safely by many in production. You won't run into escalation issues naturally on a WP site especially. The chances of any of your worries being an issue are virtually zero.

Just because some areas were given enhancements, does not and never means you will see performance boosts when upgrading. There are many factors. Again, this is a simple Wordpress site. You will not notice any improvements.
 
Back
Top