Security Updates

1Live Domain & Client Info

2Identifying Upgrade Site

3Copy to Upgrade Site

4Upgrade site – Perform Updates

5Upgrade site – Internal Testing

6Upgrade site – Client Testing

7Update Live Site

Client Name

Client Plan

Small Business

Enterprise

Live Domain

Check if there's an existing upgrade site

See if there’s an existing upgrade site we can reuse. Ask your manager if you can overwrite the existing upgrade site.

Check if there’s an existing upgrade site

Are you proceeding with updates on:

Pre-existing Upgrade Site

New Upgrade Site

Upgrade Server Viability

One of the following upgrade servers should be used for performing updates:

cluster-test-1
cluster-test-2
cluster-test-4

The following steps will help identify the appropriate server for the upgrade site.

PHP Version Match

Confirm the potential upgrade server supports PHP version of live site

Check space needs of files AND database on source server

Connect to the source server and run this command to find current disk usage for the website files and database size:


db_name=$(grep "DB_NAME" /var/www//wp-config.php | sed -E "s/.*'DB_NAME', '([^']+)'.*/\1/"); db_bytes=$(du -sb /var/lib/mysql/"$db_name" | cut -f1); www_bytes=$(du -sb /var/www/ | cut -f1); total=$(echo "$db_bytes * 2 + $www_bytes" | bc); echo "$(echo "scale=2; $total / 1024 / 1024 / 1024" | bc) GB"

Check space availability on destination server

Connect to the destination server and run this command to find current disk availability on the destination server:


df -h

If there is not enough disk space try another upgrade server.

Confirmed enough space available on destination server (needs to be files + 2 x DB + some extra space)

Add upgrade site to server

Confirm Upgrade Site Details

After verifying the details above, please specify the upgrade site details below.

Upgrade Domain

Upgrade Server

Upgrade system username

Copy live site to upgrade site

When copying to the upgrade site remember to configure the following options in the copy settings:

Options

Exclude uploads

Setup HTTP Auth

Discourage search engines

Disable emails

HTTP Authentication

Foo


# Reset NGINX password file
chattr -i /etc/nginx/.htpasswd ">

# Update password using a live merge tag
htpasswd /etc/nginx/.htpasswd @@MERGE_TAG_30@@

# Restart the service
systemctl restart nginx

Copy site

Migrate site to server (preferably using MainWP, Blogvault or All-in-one Migration also an option) EXCLUDING uploads

Verify the following on the upgrade site:

Emails are disabled

Caching Disabled (WP Rocket, FlyingPress, WP Accellerator)

Review site to make sure everything looks okay before any updates

Updates

Perform updates

Untitled

Check site logged in

Check site logged out and incognito

Draft an email to the client asking them to review the site


Hi ,

As a part of your WordPress maintenance plan, we regularly monitor your website for software requiring security updates. These updates ensure your site remains safe from potential attacks and unscheduled downtime.

Our recent review identified software that needs to be updated on . We have created a test upgrade site (please see details below) where we have updated the following:

{list_of_updates}


Popup User: {popup_username}
Popup Password: {popup_password}

We have scheduled your update for {day} {date} {month} at {time} ET (approximately). Can you please review the upgrade test site above and let us know if you have any feedback before then.

Thanks,

Ask Grahame to review email

Create a task in Asana to remind yourself to perform the updates on live

Update the live site

Clear all caches

Review the site to make sure everything looks okay (logged in and logged out)

Draft an email client to the client confirm we’ve updated the live site as scheduled

Ask Grahame to review the email


Hi ,

As scheduled, we have gone ahead and updated . Our team then reviewed your updated site and it looks like everything is working well.

We recommend that you also review your website and if you notice any problems, please notify us, and we'll be happy to assist you. If you would like anyone else to receive these notifications, please let us know, and we will be happy to add them.

Thanks,

Security Updates