Perils of Automated WordPress Updates
WordPress 5.5 update has been a painful experience and a reminder as to why website owners should not activate Automated Update, no matter what WordPress tells them. It has been a while that a WordPress update has caused so much problems and pain, which also demonstrates how users have fallen into false sense of security.
What are WordPress Updates?
WordPress CMS is made up of 3 primary components:
- WordPress Core
- Theme
- Plugins
These components are regularly updated to add functionality, as well as close any security holes that may have been discovered. It is not unusual to see monthly updates of plugins, whilst WordPress core updates are less frequent, with Themes only needing an update when new features are added or when WordPress core requires specific changes.
How do Updates work?
WordPress core updates work very much like your Operating System updates on your devices. The new package is downloaded, and the website is suspended whilst the update takes place.
Plugin updates are less intrusive as some can be updated on the fly, without having to suspend the website. Think of it as updating your Microsoft Office vs your Operating System.
Themes can be updated very quickly, but it does require your website to pause service until the update is complete.
What are the Update Options?
WordPress as default comes with the Updates to be executed automatically, but you can turn this feature off and use manual update.
Manual updates are carried out from your Admin page. You get a warning to say what updates are required, and you can select which updates (WordPress Core, Plugin, or Theme) to be executed. Windows OS users can identify with this process.
What are the advantages of manual updates?
There are 3 main advantages:
-
Timing
– You choose the time the update takes place, which is logically when your website is carrying least traffic. Automated updates happen without your control, althought they can be scheduled to be done overnight based on the server clock. The assumption being your website is quieter in the early hours of the morning.
-
Trace back
– You can choose the updates, test, and apply. This means if 4 plugins need an update, you can do the updates one at a time, check the website functionality after each plugin update before moving to the next update. If there is an issue with any updates, at least you know which plugin is causing the problem and roll back to the previous version. With automated updates you wake up in the morning and everything is updated. Just like many found out with WordPress 5.5, you could also find your website is not working as it should and have no idea what caused it.
-
Backup & Restore
– Unless your server carries out an automated backup of your website on regular basis, manual updates give you an opportunity to create a backup of your website in case you need to restore it to the previous state. Automated updates do not give you a chance to do this.
What are the downsides of Manual Updates?s
The only downside is that they are time consuming as you need to do them live.
Additionally, as with all updates, you should take a backup of your site in case you need to restore the website to it’s original state.
Some hosting companies have a time-line backup, which means your website is fully backed up every night. This means you do not have to worry about backing up the site, as you can always revert back to your last automated backup.
How to turn off the Automated Updates?
You should turn off your WordPress Automated updates, which is a simple single line of code in your wp-config.php
Go to your public folder on your server, find wp-config.php and simply add the following line:
define( ‘WP_AUTO_UPDATE_CORE’, false );
Save and close the file and you are done.
Summary
Automated updates whilst convenient, are also risky as many found out with WordPress 5.5 (this is not the only example). Finding the cause and rectifying or restoring your site back to the original state is a painful, and sometimes costly business, both in terms of loss of business and the actual cost of carrying out the work.
We offer Fully Managed WordPress hosting service, which means we take care of all the updates including testing and restoring the site if needed. Contact us for more information.