Comments on: Improved Security When Upgrading WordPress Not Automatic

By: web design tipperary

web design tipperary — Sun, 08 Feb 2009 13:58:47 +0000

i recently upgraded to latest wordpress using the auto-installer to find to my horror my templates overwritten. it was a royal pain in the hole!

By: outdoor antenna

outdoor antenna — Sat, 17 Jan 2009 22:08:22 +0000

Been looking around for security like this. Thanks for all the info this will be my first priority. I’ve bookmarked this to keep up with WP news.

By: Authentication and Permission

Authentication and Permission — Sat, 20 Dec 2008 12:57:08 +0000

This will be helpful a lot to me as i don’t have to upgrade that manually every time. It will be upgraded by itself..
Its good that wordpress has worked on the only draw back of its site.

By: Ajith Edassery

Ajith Edassery — Thu, 18 Dec 2008 07:24:58 +0000

Excellent post. I came in here searching for automatic update related security issues.

I did not know that the wp-config file is not updated on automatic update or even manual for that matter. But in a way, that is another safety measure right? (Not overwriting your settings).

I am still sitting on 2.5.x as I did not care yet to upgrade to 2.6.2 and now not yet to 2.7. The reason is that fantastico is always slow to get the upgraded releases from WP. When I checked a couple of days back they still have 2.6.X only. Btw, any feedback on 2.7? I hear that henceforth upgrades will be smoother and fully automatic

Thanks for the security tip and measures to be taken in case of a hacking. I guess, I have been vulnerable.

Ajith

By: Embroidered Baby Gifts

Embroidered Baby Gifts — Mon, 08 Dec 2008 09:05:16 +0000

Nice! Security is also available.Avoid most of the human efforts.It is far better than Manual upgrades.Tomake it more secure,they are continually improving the platform.Really good for all.

By: Outperforming Yourself

Outperforming Yourself — Wed, 19 Nov 2008 17:22:35 +0000

This is great! Bookmarked and stumbled!!

By: Michelle

Michelle — Sat, 15 Nov 2008 20:23:26 +0000

I’m so glad you posted this! I never thought about the fact that updates do not modify the config file.

By: hersey varmis

hersey varmis — Mon, 20 Oct 2008 22:37:13 +0000

I’ve never had a problem with security for my WordPress blog, but I’m sure more established ones definitely need to take further precautions, as people would actually be interested in hacking them

By: Racing Seat

Racing Seat — Fri, 03 Oct 2008 22:33:10 +0000

I believe word press is the best hands down. I have used almost every blog program out there and word press beat them all.

By: Dallas Web Design

Dallas Web Design — Thu, 11 Sep 2008 21:41:32 +0000

I love WordPress with one exception – the problems with security. You did a great job identifying the security pitfalls of WP. Unfortunately, with it being the choice platform of bloggers it will probably continue to be easily exploited.