WordPress Maintenance

Solving ‘Permissions are too open’ from inside the app — auto-diagnosing and auto-fixing SSH key permissions

Almost every user new to SSH hits this wall: WARNING: UNPROTECTED PRIVATE KEY FILE! Permissions 0644 for ‘/Users/…/id_rsa.pem’ are too open. This private key will be ignored. They placed the key in ~/.ssh/, entered the path into the SSH settings, and clicked Connect — only to see this. The fix is a single command (chmod 600 ~/.ssh/id_rsa.pem), which is obvious to anyone familiar with SSH but the biggest stumbling block for users who don’t open a terminal. Here’s the design behind solving this inside the app — diagnose, confirm, then auto-fix — and how the phases broke out. Why OpenSSH demands 0600 OpenSSH (and paramiko, which mirrors the same check …

Read more
WordPress Maintenance

‘not a valid OPENSSH private key file’ — building a compat layer for seven SSH private-key formats

If you wire SSH into WordPress maintenance automation, you’ll meet this error sooner or later: SSHException: not a valid OPENSSH private key file “I configured the key file — why?” is the usual reaction. Tracing several real SSH-connection-test failures, the root issue becomes clear: paramiko alone can’t read SSH private keys outside the OpenSSH format. In production, hosting providers and key-generation tools produce different formats, and paramiko’s standard loader rejects many of them. Here’s the design of a “seven-format compat loader” we built to handle this. Far more SSH key formats than you’d guess “SSH key” usually conjures up —–BEGIN OPENSSH PRIVATE KEY—–, but in practice the keys you receive …

Read more
WordPress Maintenance

Renaming a site without losing its data — separating display name from a stable identifier

A client asks you to rename a site from acme-staging to the production name acme. The moment you rename it in the app, the DB backups, screenshots, and thumbnails you had been collecting all appear to disappear. The files are still on disk, but the new directory is empty. The data hasn’t carried over as “the same site.” It’s a trap you can fall into on day one, and we did — with our original design. Here’s how we redesigned things so renames don’t orphan data. Why the data appears to disappear — the site name was the key The original design of WP Maintenance Manager decided file locations based …

Read more
WordPress Maintenance

Beyond ‘Update All’ — selecting plugins across sites while keeping every safety mechanism on

“A vulnerability in Elementor was just disclosed. Several of the sites I maintain run Elementor. I need to update only Elementor across those sites today.“ If you maintain WordPress sites for multiple clients, this scenario happens several times a month. Core updates and other plugin updates can wait for the regular maintenance run, but a specific plugin needs to land urgently. The trouble is that mainstream maintenance tools don’t really offer a UI for “a targeted update across multiple sites, with safety mechanisms intact.” Here’s how that design problem can be solved. The limits of an industry-standard “Update All” Most WordPress maintenance tools have an “Update All” button on each …

Read more
WordPress Maintenance

Pinpoint rollback — building per-plugin revert with WP-CLI

You batch-update 20 plugins, and one breaks the site. Most WordPress maintenance tools play it safe and roll back all 20 updates (variations on “Safe Updates” or “Atomic Updates”). It’s a reasonable default. But running in production, you start running into cases where you want only the broken one reverted, and the other 19 to keep their updates. Here’s how that design is built on top of WP-CLI. The command that makes it possible — wp plugin install –version=X –force WP-CLI has a powerful command for “install a plugin at a specific version, overwriting whatever’s currently there”: wp plugin install <plugin-slug> –version=1.2.3 –force –skip-plugins –skip-themes What each flag does: –version=1.2.3 …

Read more
WordPress Maintenance

Three gaps the WordPress maintenance industry still hasn’t solved — from a survey of four major tools

WordPress maintenance automation has a long-running market, especially outside Japan. ManageWP, MainWP, WP Umbrella, InfiniteWP — each has more than a decade of history behind it. While building our comparison pages, we surveyed all four side by side. An interesting pattern emerged: three things none of the four tools offer. Each is a gap the industry has long treated as “not feasible,” and there are structural reasons why. Here’s a look at those three unsolved areas — and why they remain unsolved. Gap 1 — Per-plugin updates with HTTP checks between each one In most maintenance tools, plugin updates run in bulk. After the batch, the tool takes a sitewide …

Read more
WordPress Maintenance

After a core rollback, halt the rest — a safety design we arrived at the hard way

In WordPress maintenance automation, you inevitably run into points where you have to decide: keep going, or stop right here? One that took us a long time to get right was this: when a WordPress core update goes wrong and gets rolled back, should the remaining plugin updates continue, or stop? We eventually switched to the “stop” design, but we started with “keep going” — and several traps surfaced only after running it in production. Here’s how the redesign happened. Three cases to separate The outcome of a core update, viewed through a rollback lens, falls into three patterns: Case 1: Core rollback succeeded, site recovered — the site is …

Read more
WordPress Maintenance

WP Umbrella’s Strengths and Who It Fits — An Honest Review from a Competing Tool Builder

Among WordPress maintenance tools, WP Umbrella has built strong traction with EU-based agencies. Launched in 2020 from France, this relatively young SaaS tool has rapidly grown its user base by anchoring its identity around three pillars: strict GDPR operations, EU data residency, and continuous uptime monitoring — all wrapped in a notably modern interface. We at WP Maintenance Manager take a different approach, and our comparison pages outline where the two diverge. But before talking about differences, the strengths of WP Umbrella deserve to be stated honestly. Here are the five points where WP Umbrella fits an agency particularly well. 1. EU data residency and strict GDPR compliance WP Umbrella’s …

Read more
WordPress Maintenance

InfiniteWP’s Strengths and Who It Fits — An Honest Review from a Competing Tool Builder

Among WordPress maintenance tools, InfiniteWP is one of the most established names. Released by Revmakx in 2011, the tool has been operated continuously for over a decade. It enjoys deep loyalty from agencies that have invested years building operational know-how around it. We at WP Maintenance Manager take a different approach, and our comparison pages outline where the two diverge. But before talking about differences, the strengths of InfiniteWP deserve to be stated honestly. Here are the five points where InfiniteWP fits an agency particularly well. 1. Over a decade of operational track record InfiniteWP’s biggest structural advantage is trust built across more than a decade of continuous operation. Released …

Read more
WordPress Maintenance

MainWP’s Strengths and Who It Fits — An Honest Review from a Competing Tool Builder

Among WordPress maintenance tools, MainWP stands out as the leader for agencies with a strong open-source bias. Founded in 2013, fully GPL-licensed, and architected so that the dashboard itself runs on your own WordPress installation, MainWP holds a distinctive position in the market — one shaped by the trust that comes from readable code and self-hosted data ownership. We at WP Maintenance Manager take a different approach, and our comparison pages outline where the two diverge. But before talking about differences, the strengths of MainWP deserve to be stated honestly. Here are the five points where MainWP fits an agency particularly well. 1. Fully open source (GPL) — you can …

Read more