WordPress.org

Make WordPress Core

Opened 5 years ago

Closed 5 years ago

Last modified 5 years ago

#9412 closed enhancement (wontfix)

Mandatory setting to ignore core_updates

Reported by: hspaans Owned by:
Milestone: Priority: normal
Severity: normal Version: 2.7.1
Component: Upgrade/Install Keywords: has-patch dev-feedback 2nd-opinion
Focuses: Cc:

Description

In Debian bugreport[1] a rough workarround is suggested based on an Ubuntu patch, but attached patch should give distributions the option to disable the core_update code. Distributions can use the following statement in a central wp-config.php to disable the feature:

define('WP_CORE_UPDATE', false);

[1] http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506685

Attachments (1)

wordpress-2.7.1-hspaans-2.patch (660 bytes) - added by hspaans 5 years ago.

Download all attachments as: .zip

Change History (9)

comment:1 DD325 years ago

  • Component changed from General to Upgrade
  • Keywords dev-feedback 2nd-opinion added
  • Owner anonymous deleted

My only objection is: Distributions like Debian & others shouldnt be allowed to disable the update notification, It gives a false sense of security that there are no updates available, whereas, In reality, A Update has been released (It just doesnt match with the packagers idea of needed update). Quite often the update is required for security-related reasons.

My preference would be for packagers to include a simple plugin by default which allows for it to only notify of packager-released updates.

I see too many outdated installs of WordPress due to relying on the packager, eg. running an ourdated version of a distro, and then using its outdated version of WP.

comment:2 hspaans5 years ago

All the big distributions backport security patches and if this is something that doesn't match your view, then sorry but it's reality. The reason behind this patch is the same as the one behind the Debian packages. Get Wordpress in one place centrale so it is easy to patch, maintain and control.

This patch is a port of my production tree for blog hosting to stop people making support calls about the warning that a new version is available. Since it matches the bug of Debian, I submitted this patch as a solution to disable the feature for distributions without disturbing the normal working of WordPress.

If you want to create a plugin to solve this issue with package management, then please do so. But I doubt the use of it. I'm not going to use it when it allows people to turn it on/off.

comment:3 jacobsantos5 years ago

@hspaans

You just explained the reason why it takes forever to get an updated distro package for Debian. So instead of testing like the latest PHP to see if it is stable and getting those new features out, Debian would rather spend all their time back porting security and bug fixes.

This is all well and good, but it is isn't perfect. You may argue stability trumps little things like new features and enhancements, but that is why Debian has a reputation of being extremely stable and worthless.

I read the Beta vs VHS and I don't think Debian has learned anything from that war. People could care less about quality, they just want features that sort of work. Now, while the users of servers are more technical minded with security, stability, and important concepts of up-time of like 100%.

The problem is that, while I do want my server to not FUBAR when I update a package, I do not expect upgrading a PHP package to have the same risk. Testing a PHP package is not as difficult as checking dependencies of various compiled libraries and making sure that everything checks out. That process is a lot more dedicated and rigorous than testing a PHP package. I just need to download WordPress, my plugins, and themes on my local system and if it doesn't break, then I'm ready to go.

What I do agree with, is that there will be certain environments where I don't want the administrator to upgrade using the built-in component.

comment:4 mrmist5 years ago

Is this a wontfix / plugin material?

comment:5 Denis-de-Bernardy5 years ago

  • Resolution set to wontfix
  • Status changed from new to closed

comment:6 Denis-de-Bernardy5 years ago

@hspaans: There is a plugin filter, pre_{$option_name}, that lets you override an option altogether. And there are several plugins that let you disable WP update notifications.

comment:7 hspaans5 years ago

Thank you for the response and the time has come to stop using Wordpress I guess.

comment:8 Denis-de-Bernardy5 years ago

  • Milestone Unassigned deleted
Note: See TracTickets for help on using tickets.