Learn about Centmin Mod LEMP Stack today
Become a Member

Wordpress Wordpress 3.9.2 security fix release out

Discussion in 'Blogs & CMS usage' started by eva2000, Aug 7, 2014.

  1. eva2000

    eva2000 Administrator Staff Member

    54,087
    12,177
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,735
    Local Time:
    12:39 AM
    Nginx 1.27.x
    MariaDB 10.x/11.4+
  2. eva2000

    eva2000 Administrator Staff Member

    54,087
    12,177
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,735
    Local Time:
    12:39 AM
    Nginx 1.27.x
    MariaDB 10.x/11.4+
    Decided to add some Wordpress Auto update settings to some of my Wordpress blogs

    edit wp-config.php add
    Code:
    define( 'WP_AUTO_UPDATE_CORE', minor );
    
    or via filters after line in wp-config.php
    Code:
    require_once( ABSPATH . 'wp-settings.php' );
    
    Add
    Code:
    // add_filter( 'auto_update_core', '__return_true' );
    add_filter( 'auto_update_core', '__return_false' );
    add_filter( 'allow_major_auto_core_updates', '__return_false' );
    add_filter( 'allow_minor_auto_core_updates', '__return_true' );
    add_filter( 'auto_update_plugin', '__return_true' );
    add_filter( 'auto_update_theme', '__return_false' );
    
    I only want minor core auto updates and plugin updates. For major core updates and theme updates will do myself :)
     
  3. Fahad Rafiq

    Fahad Rafiq New Member

    2
    1
    3
    Aug 9, 2014
    Karachi
    Ratings:
    +1
    Local Time:
    7:39 PM
    WordPress and Drupal security teams have worked together to fix the PHP XML processing vulnerability that let abusers carry out a DoS attacks.
    It was first reported by Nir Goldshlager of the Salesforce team. It is recommended for Drupal and WordPress to update their versions immediately. For more info visit: Security Updates for XML-RPC
     
  4. rdan

    rdan Well-Known Member

    5,443
    1,402
    113
    May 25, 2014
    Ratings:
    +2,194
    Local Time:
    10:39 PM
    Mainline
    10.2
    I think: define( 'WP_AUTO_UPDATE_CORE', minor );
    Is already enabled by default based on this page: Configuring Automatic Background Updates « WordPress Codex