Important Security Update: WordPress 3.3.2

On April 20, WordPress 3.3.2 was released. Keeping your WordPress version update is important as, according to company Sucuri Security, 70% of website hacks are because of outdated software. And website hacks are very much on the rise.



It is especially important to update to WordPress 3.3.2 because this update is a security update closing a number of security holes.



How do you know if you site even runs WordPress?

If we, Miller Mosaic, LLC (Phyllis Zimbler Miller and Yael K. Miller), built a website for you then it runs WordPress.

If we didn’t and you’re not sure if your site runs WordPress, login to your site and it should load a page called “Dashboard.”

The box in the upper left corner should say “Right Now” and say “You are using WordPress version number.” If you don’t see this, you most likely don’t have WordPress.

It is possible that you have a website where only the blog itself runs WordPress. If you have a separate login for your blog than the login for the other pages on your site, login to your blog and check.

So you are running WordPress, now what?

There are two ways to update WordPress: a) the quick and not the best – the auto update; or b) the less quick and recommended — the manual update. Below I will be giving instructions for both update procedures.

WordPresss developer Ipstenu says that “the auto upgrade tool will never be 100% perfect” and tells people to manually update.

I highly recommend you manually update.

If you want your website updated using the recommended manual update but aren’t comfortable doing this yourself, we offer the service for you.

If your WordPress version is 3.0 or greater, for $50 we backup your site using WP-DB-Backup, update WordPress, and update plugins. If your WordPress version is 2.7 to 2.9.2, the fee is $60.

If any of your plugins are not compatible with the latest version of WordPress, we will keep the plugin deactivated and inform you. We will not search for a similar plugin that is compatible with the version. If you desire this, that is an additional fee.

Whether you auto update or manually update, there are two first steps in common: backup your site and deactivate your plugins.

You can backup the databases of your site using the free plugin WordPress Database Backup aka WP-DB-Backup, which backups your pages and posts but not images you have uploaded. To backup “everything,” you can use the pay plugins VaultPress or BackupBuddy.

Auto Update:

Backup your site
Deactivate plugins
In the sidebar, go to Dashboard-Updates
Under the message that says “An updated version of WordPress is available. You can update to WordPress 3.3.2 automatically or download the package and install it manually,” click the button that says “Update Now.”
Once a message appears that says “WordPress updated successfully,” view your site to make sure your site didn’t break.
Activate your plugins one at a time and view your site to make sure that each plugin didn’t break your site.

For the manual update, you need to use a FTP client:

Manual Update:

Backup your site
Download your wp-config.php file
In the sidebar, go to Dashboard-Updates
Under the message that says “An updated version of WordPress is available. You can update to WordPress 3.3.2 automatically or download the package and install it manually,” click the button that says “Download 3.3.2”
Exact the files
Open the wp-config-sample.php file (not in Word) and see if there are any new settings. If so, copy the information from your wp-config.php file and paste into the wp-config-sample.php file. Save the document as wp-config.php
Deactivate plugins
In your FTP client, delete wp-admin folder and wp-includes folder
Upload new wp-admin folder and wp-includes folder
Upload all new loose files from the root directory
Delete wp-config-sample.php
Delete readme.html
Go to http://www.yoursitewebaddress.com/wp-...
If it tells you “Database Update Required,” click the button “Update WordPress Database”
View your site to make sure your site didn’t break.
Activate your plugins one at a time and view your site to make sure that each plugin didn’t break your site.

If you would like us to update your website or have questions about our update service, please email me at ykmiller@millermosaicllc.com

While Miller Mosaic LLC uses reasonable efforts to include accurate and up-to-date information regarding updating WordPress websites, Miller Mosiac LLC makes no warranties or representations as to its accuracy. Miller Mosaic LLC assumes no liability or responsibility for any errors or omissions in the instructions for updating WordPress websites.

Miller Mosaic LLC also assumes no responsibility, and shall not be liable for, any damages to, or viruses that may infect, your computer equipment or other property on account of your use of these instructions for updating your WordPress websites.

(c) 2012 Yael K. Miller

Yael K. Miller (@MillerMosaicLLC on Twitter) is the co-founder of the online marketing company Miller Mosaic LLC with a special interest in WordPress websites.