Eric Mann

<p>DGXPCO (Digital Guarantees for eXplicitly Permitted Core Operations) is a proof-of-concept cryptographic signature verification utility for WordPress software updates. The plugin will source manual (offline) signatures for WordPress core updates and prevent the application from updating unless the contents of the update payload are verified with a remote signature.</p>
<p>This provides a <em>second</em> source of truth for the integrity of WordPress updates beyond the MD5 content hash supplied in the header from the WordPress update server. If that server were ever breached, it’s unlikely the server hosting the <em>signatures</em> of the files was also breached. If the signatures ever fail to validate, you can know your site was protected from an attack.</p>


DGXPCO

Modern Tribe, Inc.

Peter Chester

<p>Description: Hook into plugin and core upgrader to support SVN driven sites. Now you can freely use the WordPress auto upgrade features without worrying about the Subversion impact. Just upgrade in WordPress and then commit the changes in SVN.</p>
<p>Additionally, this plugin displays the current SVN version in the footer of your admin panel and uses the SVN version to append to your CSS and Javascript embeds so that every time you update from SVN, your media files are cleared form cache.</p>
<p>Requires that your system permissions allow shell_exec() to execute svn commands.</p>
<p>Donate – if this is generating enough revenue to support our time it makes all the difference in the world<br />
https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=7GVFAADMQ96WA</p>
<h4>To Do</h4>
<ul>
<li>Account for SVN externals</li>
<li>Test to ensure the plugin is compatible with your server (that you can run exec svn commands)</li>
<li>Build an auto commit option? Not sure if this is a good idea.</li>
</ul>
<h3>Documentation</h3>
<p>It’s pretty straight forward. When you auto upgrade a plugin or the core, this plugin automatically svn adds and removes files appropriately. That way you can keep your entire WordPress install in SVN.</p>


SVN Auto Upgrade

Description: Hook into plugin and core upgrader to support SVN driven sites. Now you can freely use the WordPress auto upgrade features without worryi …

DGXPCO vs SVN Auto Upgrade