For the first time I got an email from my Wordpress installation yesterday, asking me to update. Have not seen that before. A nice detail I appreciate, so I don't have to keep up with what i the latest release of Wordpress at all times.
Remind HN: Update your wordpress sites
11–20 of 37 posts
Re: Remind HN: Update your wordpress sites
#12or just remove wordpress and use something secure, not bloated and easier to develop with.
A lot of people who run Wordpress have clients who need a nice, easy user interface to be able to update their site. Do you have any suggestions for software that fulfills that need and is "secure, not bloated and easier to develop with".
Re: Remind HN: Update your wordpress sites
#13As someone who owns multiple WP installs, I have added "define( 'WP_AUTO_UPDATE_CORE', true );" to all my wp-config.php files so that all my installs automatically self update with ALL future updates, minor & major
As someone who hasn't bothered with WP in a long while, is there any way to do this safely whilst still using 3rd party plugins and themes?
Re: Remind HN: Update your wordpress sites
#14or just remove wordpress and use something secure, not bloated and easier to develop with.
A lot of people who run Wordpress have clients who need a nice, easy user interface to be able to update their site. Do you have any suggestions for software that fulfills that need and is "secure, not bloated and easier to develop with".
> A lot of people who run Wordpress have clients who need a nice, easy user interface to be able to update their site.
This is clearly opinion, and should be taken as such, but I absolutely loathe Wordpress' admin interface. I'm sure at some point it was a nice, easy user interface but those days have passed. Anytime I have the misfortune of being thrown into a Wordpress backend I have no idea how to get anything done.
Re: Remind HN: Update your wordpress sites
#15As someone who owns multiple WP installs, I have added "define( 'WP_AUTO_UPDATE_CORE', true );" to all my wp-config.php files so that all my installs automatically self update with ALL future updates, minor & major
As someone who hasn't bothered with WP in a long while, is there any way to do this safely whilst still using 3rd party plugins and themes?
Depends on the themes and the plugins. Basically: not really, but if you've used a small subset of themes and plugins you should be okay.
Re: Remind HN: Update your wordpress sites
#16As someone who owns multiple WP installs, I have added "define( 'WP_AUTO_UPDATE_CORE', true );" to all my wp-config.php files so that all my installs automatically self update with ALL future updates, minor & major
It is great in theory. In practice, the last auto-update caused a WSOD on my site without any helpful debug log (both on WP and server log) until I manually disabled a (popular) plugin by editing its php file.
I wonder how a less tech-savy person would have resolved that. Even being tech-savy, I had to ask someone for help.
Updates of core and plugins are always very scary to me.
Re: Remind HN: Update your wordpress sites
#17As someone who owns multiple WP installs, I have added "define( 'WP_AUTO_UPDATE_CORE', true );" to all my wp-config.php files so that all my installs automatically self update with ALL future updates, minor & major
It is great in theory. In practice, the last auto-update caused a WSOD on my site without any helpful debug log (both on WP and server log) until I manually disabled a (popular) plugin by editing its php file. I wonder how a less tech-savy person would have resolved that. Even being tech-savy, I had to ask someone for help. Updates of core and plugins are always very scary to me.
It's a system that's based on trust, but the auto-update that is active in WordPress has saved millions of sites of getting hacked in the last few weeks: https://ma.ttias.be/in-defence-of-wordpress/
As soon as something major breaks by those auto-updates, the trust is over and a lot of users will disable it. That would be a shame indeed, because besides a couple of WSOD's some users may experience, it's an extremely powerful feature.
Re: Remind HN: Update your wordpress sites
#18And if you manage multiple WordPress websites, try something like InfiniteWP. It takes care of updating core, plugins, and themes. We use it to manage about 23 WordPress websites and being able to update all of your websites with a couple of clicks is an incredible timesaver. We still do manually review everything though (like changelogs, making sure the site still loads and isn't a WSOD, etc.)
We like InfiniteWP because it's free and we can host it ourselves (we've had no need for their paid addons), but there's also other solutions like MainWP, ManageWP, WP Remote, iControlWP, CMS Commander, etc. I think most (if not all) of those are hosted and paid / free trial.
Re: Remind HN: Update your wordpress sites
#19if i am not update. Get any problem on my website??
https://wordpress.org/news/2015/05/wordpress-4-2-2/ This is a critical security release. The cross-site scripting vulnerability lets a commenter compromise your website.
The exploit is described and demonstrated in a video on the site of the discoverer: http://klikki.fi/adv/wordpress2.html
Re: Remind HN: Update your wordpress sites
#20or just remove wordpress and use something secure, not bloated and easier to develop with.
A lot of people who run Wordpress have clients who need a nice, easy user interface to be able to update their site. Do you have any suggestions for software that fulfills that need and is "secure, not bloated and easier to develop with".
Mezzanine. And it is a joy to work with.