Managing WordPress Core Files Updates shows you how to control your WordPress core files updates, control administrators right to manage updates and more.
Last Updated: November 15, 2019
Latest News: Updated the changelog information below.
Many know how important updates are in WordPress. But at the same time you know how challenging it is to make sure that all other update like plugins and themes are compatible with the latest version of WordPress.
To make things more easy WordPress introduced Automatic background updates in WordPress 3.7. This was done in order to help those that don’t have the time to manage all their websites WordPress core updates. At the same time it also promotes better security. Security is extremely important nowadays with so many websites been hacked everywhere in the world.
In this post you will learn how to control which updates you want to allow and or maybe not allow any updates. This decision would be made because you are not yet ready to update all of your plugins or theme. Other reasons might be the developers are not ready with the patching, need more time testing or other reasons. The bottom line is you want to control what is happening on the back-end.
Business Press changelog 0.9.4
- WordPress core hotfix – are you getting error like “Unable to create directory ../images/2019/11. Is its parent directory writable by the server?” Since October 2019 WordPress doesn’t support ../ in the upload path. So we translate that path to absolute path and check if it’s in the site webroot and then let it pass
Note: Maintaining your website and keeping it up to date is one of the most important part of securing your WordPress website.
Managing WordPress Core Files Updates
What You Need:
- BusinessPress plugin for this tutorial.
- FTP access to your site if you choose to manually edit the wp-config.php file. (Optional)
Step 1 ) Install BusinessPress plugin and go to Settings -> BusinessPress -> Updates to enable and start configuring the plugin.
Note: Check the following URL how-to-install-wordpress-plugins if you need to learn how to install a plugin or addon.
Step 2 ) The following image Restrictions allows you to enable the following options.
Enable = You need to enable the plugin before the options selected take over.
Please enter the
- admin email address
Allow other admins to
- Activate and deactivate plugins and themes
- Update plugins and themes = Update WordPress core
- Install, edit and delete plugins and themes
- Export site content
Core auto updates
Version Control System
- Forces WordPress to use auto-updates even on websites which use Git or SVN.
- Click on Save All Changes button when you finish with your settings.
Note: Remember to enable the plugin so the new settings start working.
Step 3 ) Go to Settings -> BusinessPress -> Preferences to start managing the plugin preferences.
Step 4 ) The following image Security Preferences allows you to enable the following options.
Disable Security Preferences
- Generator Tag (WP, EDD)
- REST API
- XML-RPC (Protect)
Step 5 ) The following image Performance Preferences allows you to enable the following options.
Disable Performance Preferences
Step 6 ) The following image Tweaks allows you to enable the following options.
- Enable Google style results
- Enable Link Manager
- Enhance wp-admin Dropdowns
- Login Redirect
- Set Featured Images Automatically = (This feature is enabled by default.)
Step 7 ) The following image Admin Notices allows you to enable the following option.
- Hide Admin Notices
Step 8 ) The following option Login Protection allows you to enable the following options.
- You can setup fail2ban on your server = (Make sure you read the instructions.)
- The recommended plugin is Login LockDown.
Step 9 ) The following image CDN allows you to enable the following options.
- X-Pull Key
- Click on Save All Changes button when you finish setting up the preferences.
Step 10 ) Go to Settings -> BusinessPress -> Branding to manage the following options.
- Hide WP Admin Bar for subscribers
- Login Log
- Impose Admin Color Scheme
Step 11 ) Once you have completed the above, go to Dashboard -> Updates to view the plugins features displayed under updates. See image below.
The following information is an example of what you might see in your admin dashboard updates section depending on your settings and site circumstances. (Note: Your information will be different.)
Dashboard Update Information
- Current WordPress version installed 4.9.6.
- Last updated: 5 July 2018
- Status: Secure
- Projected security updates: 22 months.
- Core auto-updates status: only Minor version updates enabled.
- Recently blocked updates: 4.9.7 3 hours agon
- WP core internal autoupdate check 3 days ago.
- WP core internal autoupdate check 2 months ago.
- BusinessPress delays these updates by 5 days to make sure you are not affected by any bugs in them.
- There is a security update of WordPress available = You can click on Upgrade to WordPress 4.9.7 button to upgrade WordPress. Or you can click on download 4.9.7 link and upload it via FTP.
- If you did not have any updates available then you will see the following message You have the latest version of WordPress.
That is how simple it is to manage your WordPress core files update and add some more security with other enabled options in the BusinessPress plugin.
If you have any questions please let me know. I will be updating this from time to time. So keep coming back for the latest post.