2014-12-30, 05:32 PM
(2014-12-30, 04:16 PM)laie_techie Wrote: I say leave this out!
Not too long ago we had our version check service hacked. If autoupdate is installed, someone could hack the main server and have the malware propagate to every forum.
Autoupdate could override customizations (eg. Google SEO applies a patch to functions.php).
Forum admin should install the new version and verify functionality of existing plugins and modifications before rolling out to the live forum. How many people are still on the MyBB 1.6 branch because 1.8 breaks a needed plugin or theme?
This. By allowing auto-update, you're trusting a foreign entity to write data to your server files. That's just a major security issue.