Automatic updates works well these days (it used to be more dangerous)… so the upside of having automated updates turned on far outweighs the risks of a out of date or vulnerable plugin
Turn on auto updates for core and prominent plugins. Because cybercreeps. if you have an attentive ops staff, a staging site, and a mission critical web presence you can turn it on in your staging site to test new releases before going live. Otherwise, the risk of a successful cyberattack is bigger than the risk of a plugin update hosing your site.
I run websites for some financial institutions. It’s just marketing sites but the homepage has a login to online banking.
Most users bookmark that page and just login from there.
We used to allow auto updates. Until one time it took the whole site down, corrupted some data, and caused 48 hours of time to revert, restore, and get back online.
During that time, we had thousands of support calls/emails come in from people who said they couldn’t access online banking and it was urgent.
Since then, I created a staging site and all plugin upgrades must be done one at a time, with a full audit of the website prior to updating the next one.
For very simple sites automatically updates can be a good thing, but on more complex sites where there is a larger chance of trouble I prefer manual updates
Backups backups backups
Backup often and regularly and then it doesn’t matter if you yeet your website into an active volcano..
Automatic updates works well these days (it used to be more dangerous)… so the upside of having automated updates turned on far outweighs the risks of a out of date or vulnerable plugin
Turn on auto updates for core and prominent plugins. Because cybercreeps. if you have an attentive ops staff, a staging site, and a mission critical web presence you can turn it on in your staging site to test new releases before going live. Otherwise, the risk of a successful cyberattack is bigger than the risk of a plugin update hosing your site.
I run websites for some financial institutions. It’s just marketing sites but the homepage has a login to online banking.
Most users bookmark that page and just login from there.
We used to allow auto updates. Until one time it took the whole site down, corrupted some data, and caused 48 hours of time to revert, restore, and get back online.
During that time, we had thousands of support calls/emails come in from people who said they couldn’t access online banking and it was urgent.
Since then, I created a staging site and all plugin upgrades must be done one at a time, with a full audit of the website prior to updating the next one.
For very simple sites automatically updates can be a good thing, but on more complex sites where there is a larger chance of trouble I prefer manual updates
Backups backups backups
Backup often and regularly and then it doesn’t matter if you yeet your website into an active volcano..