Due to *the risk* this feature should be optional. I think many user do not hack core. Also I am talking about only major bug fix. Something like *heartbleed* for MyBB.
Klick-to-update with entering ftp credentials (like in wp) plus the information about which files will be updated would be nice, anyway. ^^ But I think uncontolled auto update could collide with other things you do at the exact moment the updater chooses to update.
as others have stated, I prefer applying updates manually so I can get everything ready before & after the updates are applied.
Merged threads.
I can imagine a system for one-click updates (perhaps including an option to let MyBB auto-update itself after making backups and validating them if no custom core modifications were detected), but it would need more work on MyBB.com than the code itself to make sure the packages are properly revised and authenticated (note that there are problems with 1.8 checksums now).
(2016-04-15, 11:38 AM)Devilshakerz Wrote: [ -> ]Merged threads.
I can imagine a system for one-click updates (perhaps including an option to let MyBB auto-update itself after making backups and validating them if no custom core modifications were detected), but it would need more work on MyBB.com than the code itself to make sure the packages are properly revised and authenticated (note that there are problems with 1.8 checksums now).
This could work. There might be a number of complexity implementing this, but I don't find anything wrong with giving admins an OPTION.
Thanks @Devilshakerz for your reply!!
(2016-04-12, 07:09 PM)Nathan Malcolm Wrote: [ -> ]Updates should be done manually. There's more to upgrading than just patching, such as backups and verification. Lots can go wrong.
Also the ability to push updates automatically to tens of thousands of forums doesn't sound like a good idea. We've seen how bad it can be on multiple occasions.
https://blog.mybb.com/2011/10/25/some-cl...erability/
https://blog.mybb.com/2014/11/15/github-...mpromised/
No auto-update, but what about an update feature right from the Admin Dashboard. Actually the hard work is to download the zip locally, unzip it and upload it to the server.
Many (believe my word on that, no statistics have been done) admins don't backup their database, backup their files, deactivate plugins, close the board, upload the new files, run the update if needed, reactivate plugins, reactivate the board if all okay, if something went wrong recover files + database.
How about making everything seemingless to a novice admin? (well maybe not do all the things I've listed up there).
(2016-06-02, 07:58 PM)TheGarfield Wrote: [ -> ] (2016-04-12, 07:09 PM)Nathan Malcolm Wrote: [ -> ]Updates should be done manually. There's more to upgrading than just patching, such as backups and verification. Lots can go wrong.
Also the ability to push updates automatically to tens of thousands of forums doesn't sound like a good idea. We've seen how bad it can be on multiple occasions.
https://blog.mybb.com/2011/10/25/some-cl...erability/
https://blog.mybb.com/2014/11/15/github-...mpromised/
No auto-update, but what about an update feature right from the Admin Dashboard. Actually the hard work is to download the zip locally, unzip it and upload it to the server.
Many (believe my word on that, no statistics have been done) admins don't backup their database, backup their files, deactivate plugins, close the board, upload the new files, run the update if needed, reactivate plugins, reactivate the board if all okay, if something went wrong recover files + database.
How about making everything seemingless to a novice admin? (well maybe not do all the things I've listed up there).
I personally 100% agree with what you said and asked for
There is auto update and then there is making it easier to update. Downloading unzipping uploading should not exist in 2016, 2017, etc. imo.
I doubt auto upgrades will be part of 2.0. The security risks far outweigh the benefits in my eyes. Over the past couple of years there have been a couple of incidents where we have had security breaches. Luckily, they didn't cause too much harm. Having a way for us to push code down to other forums would massively increase the target on our backs - suddenly you can hack all MyBB based forums with a single attack on our core infrastructure. Right now we just don't have the infrastructure or the staffing to manage such a thing.