{"id":142,"date":"2008-05-05T01:58:04","date_gmt":"2008-05-05T06:58:04","guid":{"rendered":"http:\/\/www.jasonmorrison.net\/content\/?p=142"},"modified":"2008-05-05T01:58:04","modified_gmt":"2008-05-05T06:58:04","slug":"keep-your-wordpress-site-from-being-hacked-with-automatic-upgrades","status":"publish","type":"post","link":"http:\/\/www.jasonmorrison.net\/content\/2008\/keep-your-wordpress-site-from-being-hacked-with-automatic-upgrades\/","title":{"rendered":"Keep your WordPress site from being hacked with automatic upgrades"},"content":{"rendered":"

I’ve already written about what to do once your site has been hacked<\/a>, but let’s talk a bit about hack prevention.<\/p>\n

I think it’s fair to say that most people manage their own WordPress installation because they have some programming background and want a little more control than you get with a hosted solution like Blogger or WordPress.org.\u00a0 Webmasters like you and me usually know a bit about security and how important it is to keep things up to date.\u00a0 The problem is that every minute spent upgrading your CMS to the latest version is a minute not spent writing or running your business.<\/p>\n

So you know you should download the latest patch, make backups, disable, plugins, install… but it’s already 1 a.m. and you need to meet clients in the morning, so you put it on the back burner and your site ends up hacked.\u00a0 What’s the solution?\u00a0 If you’re Technorati, the solution is to motivate bloggers a bit more by threatening to delist them<\/a>.\u00a0 I can understand their point of view.\u00a0 But how about something a bit more positive – automation.<\/p>\n

There are two ways I’ve automated WordPress upgrades.\u00a0 One is through Fantastico, which is a really cool script management system that your web host should probably provide.\u00a0 I’m giving up on Fantastico<\/a>, though, because it takes a long time for it to notice updates.<\/p>\n

The second way I just tried out recently is the WordPress Automatic Upgrade plugin<\/a>.\u00a0 I’ve tried it out on three blogs now and so far so good – it hasn’t skipped a beat.\u00a0 This functionality really needs to be folded into WordPress itself – with 2.5, they added the ability to automatically upgrade plugins but it seems like most security holes lately are found in the WordPress code itself.<\/p>\n

That plugin is WordPress-only, but I recommend doing some research to see if there’s something similar out their for your blog software or CMS.\u00a0 Even if WordPress never has another security bug, there’s always Joomla, and Drupal, etc…<\/p>\n","protected":false},"excerpt":{"rendered":"

I’ve already written about what to do once your site has been hacked, but let’s talk a bit about hack prevention. I think it’s fair to say that most people manage their own WordPress installation because they have some programming background and want a little more control than you get with a hosted solution like […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[19],"tags":[251,111,223,110,250],"class_list":["post-142","post","type-post","status-publish","format-standard","hentry","category-blog","tag-cms","tag-plugin","tag-security","tag-wordpress","tag-wordpress-automatic-upgrade"],"aioseo_notices":[],"_links":{"self":[{"href":"http:\/\/www.jasonmorrison.net\/content\/wp-json\/wp\/v2\/posts\/142","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.jasonmorrison.net\/content\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.jasonmorrison.net\/content\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.jasonmorrison.net\/content\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/www.jasonmorrison.net\/content\/wp-json\/wp\/v2\/comments?post=142"}],"version-history":[{"count":0,"href":"http:\/\/www.jasonmorrison.net\/content\/wp-json\/wp\/v2\/posts\/142\/revisions"}],"wp:attachment":[{"href":"http:\/\/www.jasonmorrison.net\/content\/wp-json\/wp\/v2\/media?parent=142"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.jasonmorrison.net\/content\/wp-json\/wp\/v2\/categories?post=142"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.jasonmorrison.net\/content\/wp-json\/wp\/v2\/tags?post=142"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}