BulletProof Security Blog

12:
AutoRestore AJAX Automation for WP 4.6 Shiny Updates

Additional Info|WP Backward|Forward Compatibility: AutoRestore AJAX Automation
BPS Pro 12 uses AJAX to detect plugin, theme and WP Core Shiny updates and installations. This allows for improved seamless ARQ Automation when updating or installing plugins, themes and WP Core updates. The ARQ AJAX Automation code in BPS Pro 12 is conditional to WP 4.6+. If you have an older WP version installed then older BPS Pro ARQ Automation will be used instead of the new ARQ AJAX Automation. WP Trivia Fact: There are 21 different ways to update or install plugins, themes and WP Core. If you count Network|Multisite separately then there are 35 different ways to update or install plugins, themes and WP Core.

Dev Note: AutoRestore AJAX Automation: ARQ AJAX shutdown time is 15 seconds for individual plugin and theme updates and installations. This creates a 15 second buffer window for scenarios where several individual plugin or theme updates or installations might be performed in succession. The ARQ AJAX shutdown time of 15 seconds is reset in this type of scenario so that the ARQ file backup and ARQ Turn On does not occur until all plugin or theme updates or installations are completed in this particular type of scenario. For Plugin and/or Theme Bulk Updates and new Theme installations the BPS Pro AutoRestore (ARQ) Automatic Shutdown & Backup Notice is displayed, which requires one-click to complete ARQ file backup and ARQ Turn On. WP Shiny Updates and WP Automatic Updates are 2 completely different things. AutoRestore AJAX Automation handles WP Shiny Updates and AutoRestore Automation for WP Automatic Updates (Core, Plugins and Themes) is handled by using WP upgrader_pre_install and upgrader_post_install filters and additional automation methods.

Plugins page: plugins.php
Plugin Update Apply button: Bulk Update: One-Click ARQ Automation: BPS Pro AutoRestore (ARQ) Automatic Shutdown & Backup Notice is displayed. Requires one-click to complete ARQ File Backup & ARQ Turn On.
Update now link: Single Plugin update under the plugin description. Seamless ARQ Automation: ARQ Shutdown, ARQ File Backup & ARQ Turn On.
View version details link iFrame: Single Plugin update by clicking the View version details link on the plugins.php page & Install Update Now link in the iframe. Seamless ARQ Automation: ARQ Shutdown, ARQ File Backup & ARQ Turn On.
Dev Note: ARQ AJAX Automation is conditional for Plugin updates. If ARQ is monitoring the plugins folder/files then ARQ AJAX Automation will be used. If ARQ is not monitoring the plugins folder/files then ARQ AJAX Automation will not be used since new updated Plugin files do not need to be backed up. The condition is an explicit match (exact match) for ARQ folder exclude rule: plugins.

Plugins Add New|Add Plugins page: plugin-install.php
Install Now button in plugin Card: Single Plugin installation by clicking the Install Now button in the plugin Card. Seamless ARQ Automation: ARQ Shutdown, ARQ File Backup & ARQ Turn On.
More details link in the plugin Card iFrame: Single Plugin installation by clicking the More Details link & Install Now button in the iframe. Seamless ARQ Automation: ARQ Shutdown, ARQ File Backup & ARQ Turn On.
Upload Plugin installation: Single Plugin installation from upload: plugins.php > Add New > plugin-install.php > Upload Plugin > Install Now button. Seamless ARQ Automation: ARQ Shutdown, ARQ File Backup & ARQ Turn On.
Dev Note: ARQ AJAX Automation is conditional for Plugin installations. If ARQ is monitoring the plugins folder/files then ARQ AJAX Automation will be used. If ARQ is not monitoring the plugins folder/files then ARQ AJAX Automation will not be used since new installed Plugin files do not need to be backed up. The condition is an explicit match (exact match) for ARQ folder exclude rule: plugins.

Themes page: themes.php
Update Now button above Theme screenshot: Single Theme update by clicking the Update now button above Theme screenshots. Seamless ARQ Automation: ARQ Shutdown, ARQ File Backup & ARQ Turn On.
Update Now link in Theme Details Overlay: Single Theme update by clicking Theme Details > update now link in the Theme Details Overlay. Seamless ARQ Automation: ARQ Shutdown, ARQ File Backup & ARQ Turn On.
Dev Note: ARQ AJAX Automation is conditional for Theme updates. If ARQ is monitoring the themes folder/files then ARQ AJAX Automation will be used. If ARQ is not monitoring the themes folder/files then ARQ AJAX Automation will not be used since new updated Theme files do not need to be backed up. The condition is an explicit match (exact match) for ARQ folder exclude rule: themes.

Themes Add New|Add Themes page: theme-install.php
All Theme installation methods on the theme-install.php page use One-Click ARQ Automation: BPS Pro AutoRestore (ARQ) Automatic Shutdown & Backup Notice is displayed. Requires one-click to complete ARQ File Backup & ARQ Turn On. Currently there are too many variations in Theme installation methods/code/etc., complications and potential problems that could occur by trying to use Seamless ARQ Automation on any of the theme-install.php page installation links or buttons. Theme installation is not a regular or ongoing action and is typically a rare or one-time event so Seamless ARQ Automation is not really necessary for Theme installations.
Dev Note: ARQ AJAX Automation is conditional for Theme installations. If ARQ is monitoring the themes folder/files then ARQ AJAX Automation will be used. If ARQ is not monitoring the themes folder/files then ARQ AJAX Automation will not be used since new installed Theme files do not need to be backed up. The condition is an explicit match (exact match) for ARQ folder exclude rule: themes.

Updates page: update-core.php
Update Now button: WP Core Update: Seamless ARQ Automation: ARQ Shutdown, ARQ File Backup & ARQ Turn On.
Re-install Now button: WP Core Re-install: Seamless ARQ Automation: ARQ Shutdown, ARQ File Backup & ARQ Turn On.
Update Plugins button: Bulk Plugin Update: Conditional if someone is allowing ARQ to monitor the plugins folder. One-Click ARQ Automation: BPS Pro AutoRestore (ARQ) Automatic Shutdown & Backup Notice is displayed. Requires one-click to complete ARQ File Backup & ARQ Turn On.
Update Themes button: Bulk Theme Update: One-Click ARQ Automation: BPS Pro AutoRestore (ARQ) Automatic Shutdown & Backup Notice is displayed. Requires one-click to complete ARQ File Backup & ARQ Turn On.
Update Translations: WP Translation File Update: Seamless ARQ Automation: ARQ Shutdown, ARQ File Backup & ARQ Turn On.
Dev Note: ARQ AJAX Automation is conditional for Plugin and Theme updates. If ARQ is monitoring the plugins and/or themes folders/files then ARQ AJAX Automation will be used. If ARQ is not monitoring the plugins and/or themes folders/files then ARQ AJAX Automation will not be used since new updated Plugin and/or Theme files do not need to be backed up. The conditions are explicit matches (exact matches) for ARQ folder exclude rules: plugins and/or themes.

New Setup Wizard Option: Zip File Download Fix (Incapsula, Proxy, Other Cause)

This new option allows these Zip files to be downloaded: Custom Code Export Zip file, Login Security Table Export Zip file or the Setup Wizard Root htaccess file backup Zip file if 403 errors are occurring when trying to download zip files due to an IP address problem with Incapsula, other Proxies or some other cause.

Other|Misc:

• Core Improvement: AutoRestore Automation for WP Plugin and Theme Automatic Updates is now using the WP upgrader_pre_install and upgrader_post_install filters. AutoRestore Automation for WP Core Automatic Updates is still handled the same.
• Procedural: WordPress 4.6 Beta 4 testing completed.
• WP 4.6 CSS Changes: CSS property changes for WP 4.6.
• Enhancement: System Info page PHP Configuration File (php.ini) path check added. Displays the path to the currently loaded php.ini file if available.
• Enhancement: Once daily cron option added to HPF Cron Check Frequency option.
• Enhancement: File contents displayed in Hidden Plugin Folder|Files (HPF) Alert.
• Improvement: JavaScript disabled check added for BPS plugin pages. Displays a warning message if JavaScript is disabled in the Browser.
• Improvement: AutoRestore Exclude wp-content Folders Forms combined into 1 Form to reduce total overall number of clicks required.
• Improvement: P-Security ini_set Options Forms combined into 1 Form to reduce total overall number of clicks required.
• BugFix: Plugin Firewall AutoPilot Mode filter modification to prevent MMode Security Log entries from being logged by Network|Multisite subsites, which were being interpreted as new Plugin Firewall rules that needed to be created by AutoPilot Mode.
• BugFix: Setup Wizard ARQ Exclude wp-content Folders creating default exclude rules on re-run for: plugins and mu-plugins folders. Array conditional logic flaw fixed.
• BugFix: Hidden Plugin Folders|Files Cron alert displayed on Network|Multisite subsites correction.
• BugFix: DB Table Prefix Changer Network|Multisite subsite Site options [DB Table Prefix]_[Site ID]_user_roles DB row update correction.
• BugFix: MMode Network|Multisite subdomain site type: PHP Strict Standards: Only variables should be passed by reference fix.
• Change: DB Backup Log: Old Zip Backup File(s) Automatic Deletion hourly log entries will only be logged if a DB Backup zip file was deleted.
• Change: HUD Safe Mode Static check changed to a Dismiss Notice.
• Dev Note: AutoRestore AJAX Automation JavaScript disabled check on plugins.php, themes.php and theme-install.php pages. Displays a warning message if JavaScript is disabled in the Browser.
• Dev Note: ARQ wp-content excessive files check removed. Pending ARQ Cron Debug runtime comparison check in 12.1.