Why keeping your software updated matters
Outdated software is the number-one cause of hacked websites. Updates are not just new features — they patch security holes that attackers actively scan for.
What to keep updated
- Your CMS core — WordPress, Nextcloud, phpBB and so on. Update from inside the app itself (WordPress: Dashboard → Updates). CHPanel's App Installer sets the app up for you, but it does not update it afterwards.
- All themes and plugins/extensions.
- Your PHP version — in CHPanel's PHP tab (Select PHP Version), pick the newest version your site supports. It applies within seconds, and you can switch back just as quickly if something breaks.
Make it painless
- Turn on automatic updates in WordPress where you can — for minor core releases and for trusted plugins.
- Before a major update, remember that CHPanel keeps a nightly restore point for seven days (Backups tab) — you can roll back files and the database if the update goes wrong. A plugin backup just before is extra insurance.
- Check for updates on a schedule — say, every couple of weeks — and glance at Security Advisor (Security tab) while you are in CHPanel.
Old, unused software?
Delete plugins, themes and apps you no longer use — every extra piece of software is a potential way in. Watch out for test installs and old copies of your site left in a subfolder; they get forgotten and never updated. Need help updating safely? Open a support ticket.