Why is Drupal such a hassle to upgrade, with all the security updates which pop up it seems like I need to upgrade every month.
Has anyone build an automatic update script which will download, backup and install the updates?
Nik

Comments

Wim Leers’s picture

That's insecure, by definition.

Quint’s picture

This is not obvious to me ... why is an upgrade script insecure by definition?

VM’s picture

updates happen, its part of the software world whether open source or commercial. Be happy that drupal dev's patch the security holes as quickly as possible and provide the update rather then leaving you with an insecure site.

borfast’s picture

While not a fully automatic update system, maybe this helps:

http://borfast.com/node/316

Raul

Swift Arrow’s picture

Drush.module has a command to install modules and update modules automagically... seems quite good. I'm trying now to find out if it's good for a production site?

Is it safe to install drush on a production site?

borfast’s picture

Yes, it's perfectly safe, I use it every day to manage several Drupal sites.

asad.hasan’s picture

I suggest running a cron script to backup database and source before you update....just so if anything goes wrong u can just restore it the next morning

mgifford’s picture

Naked security is calling for us as a community to rethink this.

"What Drupal badly needs but doesn't have is an automatic updater that rolls out security updates by default."

http://nakedsecurity.sophos.com/2014/10/30/millions-of-drupal-websites-a...

I couldn't find a related issue queue about this, so created https://www.drupal.org/node/2367567