Wordpress Migration

MPDL

This page will contain information on the migration of our wordpress instances from version 2.8.1 to version 3.2.

= Why we should migrate =

Security Holes fixed

 * 3.1.3 Prevent sniffing out user names, Media security fixes (CVE Score 10), Improves file upload security (CVE Score 10), Prevent Clickjacking attacks
 * 3.0.2 SQL Injection vulnerabilities.

Upgrade to Wordpress Multi-Site from Wordpress Multi-User

 * We have no upgrade path from Wordpress Multi-User.
 * Ability to use standard plugins, not plugins specially written / tested for WPMU
 * Ability to get Bug-Fixes for security advisories

New Features

 * Better management support
 * The ability to use Taxonomies (hierarchies of categories)
 * Bulk update of themes becomes possible
 * Incremental upgrades become possible.

Support
Wordpress is an open-source product, where support is all provided by volunteers. This has advantages (it's free) and disadvantages (if one is running an older version of Wordpress, you will simply be recommended to upgrade and no research will be done

= Affected Blogs =

Migrated Blogs
Currently located on a test instance. (vm52.mpdl.mpg.de) Next steps:
 * 1) Change themes ans Plugins
 * 2) Testing by Steffie
 * 3) Testing from the institutes
 * 4) Live migration


 * The Plugin for keywords and organizations must not be updated
 * To be checked if "zombie" blogs should be kept in old instance on seperate server
 * todoroki
 * soap

Not Migrated Blogs
These blogs will not be migrated.

= Plugins to check =
 * fauxML
 * http://wordpress.org/tags/fauxml: "This plugin is useless now. WordPress 2.5+ comes with this functionality already."


 * Secure and Accessible PHP Contact Form
 * http://green-beast.com/blog/?page_id=136: "Changes have been made by Mike Jolley to this plugin to make it WordPress v3.0 and later compatible .."


 * FOAF profile
 * http://colab.mpdl.mpg.de/mediawiki/FOAF-profile_Wordpress_Plugin: seems to be only in use by metadata twr, not really sure what the benefit of this plugin is.


 * Google Maps Quicktag - MU
 * Simple Trackback Validation
 * http://sw-guide.de/wordpress/plugins/simple-trackback-validation, can be replaced by akismet


 * Categories and authors
 * colab.mpdl.mpg.de/mediawiki/Wordpress_Plugin_Categories_and_Authors : tested, works fine


 * Get Recent Comments
 * http://wordpress.org/extend/plugins/get-recent-comments/ : tested, works fine


 * PubMan Content v1
 * Needs to be updated, company Junoe contacted


 * Unfiltered MU
 * xLanguage

= When we are at it =
 * Change name of responsible person from Kurt Mehlhorn to Frank Sander
 * Add contact sites (solution blogs)
 * Add impressum(solution blogs), mandatory! (link to http://www.mpdl.mpg.de/main/imprint_en.htm?mp=46 ?)
 * http://www.linksandlaw.info/Impressumspflicht-15.html
 * http://www.impressum-recht.de/impressum-pflicht-homepage-html.html


 * Where do we store our wp stuff (themes plugins etc.), currently at: https://dev.livingreviews.org/repos/...
 * Seems that email functions are broken(e.g. notification for new comments to approve), to be fixed with update
 * Improve monitoring
 * tighten up procedure for adding videos
 * awstats for every blog
 * Clean up users (make users which are no longer employees of the mpdl inactive, delete inactive users with no posts)

= Technical Requirements =
 * PHP version 5.2.4 or greater
 * MySQL version 5.0 or greater
 * The mod_rewrite Apache module
 * Recommended: suPHP

= Actions=
 * WP Update How To: http://codex.wordpress.org/Updating_WordPress
 * Start test instance with new wp version and migrate blogs
 * Hiwi testing
 * Blog admin testing
 * After admin ok move test instance to live instance and delete old blogs.
 * Schedule a meeting after migration with all blog people to find a strategy how to handle blogs further [check here]