Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

What's new in WordPress 3.7, "Basie"

poststat.us

Post reply on HN
Print view View original

11–20 of 29 posts

Re: What's new in WordPress 3.7, "Basie"

#11

Post by xdissent »

gregd wrote: post #4
DigitalSea wrote: post #3

The automatic background updates feature might be the most important feature of all in 3.7. Hopefully this goes a long way to plug some of the rampant security issues that plague the CMS because of failure to update to a later version. The new date querying features are also a welcome addition as it has been notoriously hacky in prior versions querying advanced date values in Wordpress and finally we search has been…

Ugh. I'm extremely skeptical of auto-updates. My servers don't auto-update, my workstation doesn't auto-update..nothing I own, auto-updates if it's capable of it. Can anyone tell me if it can be turned off? All I'm seeing is this: For developers there are lots of options around how to control the new updates feature, including allowing it to handle major upgrades as well as minor ones, more sophisticated date query s…

@nacin responded to me on Twitter saying the auto-updates are automatically disabled if WP detects that it's being run from within some source control repositories. I asked if it's smart enough to know if it lives deeper within a repository and haven't yet received an answer.

Re: What's new in WordPress 3.7, "Basie"

#12

Post by xdissent »

gregd wrote: post #4
DigitalSea wrote: post #3

The automatic background updates feature might be the most important feature of all in 3.7. Hopefully this goes a long way to plug some of the rampant security issues that plague the CMS because of failure to update to a later version. The new date querying features are also a welcome addition as it has been notoriously hacky in prior versions querying advanced date values in Wordpress and finally we search has been…

Ugh. I'm extremely skeptical of auto-updates. My servers don't auto-update, my workstation doesn't auto-update..nothing I own, auto-updates if it's capable of it. Can anyone tell me if it can be turned off? All I'm seeing is this: For developers there are lots of options around how to control the new updates feature, including allowing it to handle major upgrades as well as minor ones, more sophisticated date query s…

@nacin says the WP auto-updates are disabled if the WP code is contained in any repository, up to the root folder. http://make.wordpress.org/core/2013/09/24/automatic-core-upd...

Re: What's new in WordPress 3.7, "Basie"

#13

Post by 8ig8 »

gregd wrote: post #4
DigitalSea wrote: post #3

The automatic background updates feature might be the most important feature of all in 3.7. Hopefully this goes a long way to plug some of the rampant security issues that plague the CMS because of failure to update to a later version. The new date querying features are also a welcome addition as it has been notoriously hacky in prior versions querying advanced date values in Wordpress and finally we search has been…

Ugh. I'm extremely skeptical of auto-updates. My servers don't auto-update, my workstation doesn't auto-update..nothing I own, auto-updates if it's capable of it. Can anyone tell me if it can be turned off? All I'm seeing is this: For developers there are lots of options around how to control the new updates feature, including allowing it to handle major upgrades as well as minor ones, more sophisticated date query s…

I'm fine with it, but i understand the concern. It sounds pretty easy to disable the feature...

> The simplest way to disable it is to add define( 'AUTOMATIC_UPDATER_DISABLED', true ); to your wp-config.php file

Re: What's new in WordPress 3.7, "Basie"

#14

Post by ChrisNorstrom »

To me Wordpress is one of the most important things to happen to the internet, Not Facebook, not Twitter. Wordpress has democratized creating a site and helped millions of people create an online business, community, blog, helping bring in massive amounts of revenue for small business owners.

I've got 4 sites running wordpress: my portfolio, my online store, a design database for items under $50, and a magazine cutout marketplace. (See my profile for links) Those last two I mentioned took less than a week to tweak and hack together thanks to the speed and ease of setting up wordpress sites.

It's sad that Matt Mullenweg never got the same recognition that Jack Dorsey or Mark Zuckerberg got. He definitely deserves it. We've got to stop only celebrating and worshiping people who make money. I think Matt empowered people just as much if not more.

Re: What's new in WordPress 3.7, "Basie"

#15

Post by wwweston »

ChrisNorstrom wrote: post #14

To me Wordpress is one of the most important things to happen to the internet, Not Facebook, not Twitter. Wordpress has democratized creating a site and helped millions of people create an online business, community, blog, helping bring in massive amounts of revenue for small business owners. I've got 4 sites running wordpress: my portfolio, my online store, a design database for items under $50, and a magazine cutou…

Mullenweg probably isn't crying all the way to the bank; Automattic does pretty well and might be worth as much as Tumblr:

http://finance.fortune.cnn.com/2013/05/24/automattic-nears-t...

Re: What's new in WordPress 3.7, "Basie"

#16

Post by krogsgard »

gregd wrote: post #4
DigitalSea wrote: post #3

The automatic background updates feature might be the most important feature of all in 3.7. Hopefully this goes a long way to plug some of the rampant security issues that plague the CMS because of failure to update to a later version. The new date querying features are also a welcome addition as it has been notoriously hacky in prior versions querying advanced date values in Wordpress and finally we search has been…

Ugh. I'm extremely skeptical of auto-updates. My servers don't auto-update, my workstation doesn't auto-update..nothing I own, auto-updates if it's capable of it. Can anyone tell me if it can be turned off? All I'm seeing is this: For developers there are lots of options around how to control the new updates feature, including allowing it to handle major upgrades as well as minor ones, more sophisticated date query s…

There are filters to turn off auto-updates easily. Also keep in mind it's currently for minor updates only, which basically never break a site. And in beta and RC testing, there were no hard failures, only some instances where the update stopped because it detected a potential issue. It's a pretty clean setup, and overall really good for the security of millions of websites.

Re: What's new in WordPress 3.7, "Basie"

#17

Post by rmccue »

xdissent wrote: post #11
gregd wrote: post #4

Earlier quoted context omitted.

Ugh. I'm extremely skeptical of auto-updates. My servers don't auto-update, my workstation doesn't auto-update..nothing I own, auto-updates if it's capable of it. Can anyone tell me if it can be turned off? All I'm seeing is this: For developers there are lots of options around how to control the new updates feature, including allowing it to handle major upgrades as well as minor ones, more sophisticated date query s…

@nacin responded to me on Twitter saying the auto-updates are automatically disabled if WP detects that it's being run from within some source control repositories. I asked if it's smart enough to know if it lives deeper within a repository and haven't yet received an answer.

It is smart enough, it'll keep traversing upwards and check every parent directory.

Re: What's new in WordPress 3.7, "Basie"

#18

Post by e12e »

DigitalSea wrote: post #3

The automatic background updates feature might be the most important feature of all in 3.7. Hopefully this goes a long way to plug some of the rampant security issues that plague the CMS because of failure to update to a later version. The new date querying features are also a welcome addition as it has been notoriously hacky in prior versions querying advanced date values in Wordpress and finally we search has been…

Auto-update? It shouldn't be able to auto-update. It shouldn't have write-privileges to the folders running code!

Granted, I generally don't do php, and cerainly not wordpress -- but with all these php projects having a run-once-magically-write-a-config-php-thingy -- they also generally throw a warning if that config is writable after initial setup.

Do the chgrp-dance when installing/upgrading: chgrp www-data -R php-dir;chmod g+rwX -R php-dir;#set up via web installer;chmod g-w -R php-dir;chgrp not-the-web-server -R php-dir; #fix permissions on any upload-folders

Re: What's new in WordPress 3.7, "Basie"

#19

Post by poissonpie »

8ig8 wrote: post #13
gregd wrote: post #4

Earlier quoted context omitted.

Ugh. I'm extremely skeptical of auto-updates. My servers don't auto-update, my workstation doesn't auto-update..nothing I own, auto-updates if it's capable of it. Can anyone tell me if it can be turned off? All I'm seeing is this: For developers there are lots of options around how to control the new updates feature, including allowing it to handle major upgrades as well as minor ones, more sophisticated date query s…

I'm fine with it, but i understand the concern. It sounds pretty easy to disable the feature... > The simplest way to disable it is to add define( 'AUTOMATIC_UPDATER_DISABLED', true ); to your wp-config.php file

Urg. It should be off by default in my opinion. You should have to explicitly turn it on.

Re: What's new in WordPress 3.7, "Basie"

#20

Post by zeroDivisible »

poissonpie wrote: post #19
8ig8 wrote: post #13

Earlier quoted context omitted.

I'm fine with it, but i understand the concern. It sounds pretty easy to disable the feature... > The simplest way to disable it is to add define( 'AUTOMATIC_UPDATER_DISABLED', true ); to your wp-config.php file

Urg. It should be off by default in my opinion. You should have to explicitly turn it on.

I think it should ask the user, explicitly giving him information about what's wrong with both approaches.
Post reply on HN