Skip to content

v1.0.5

Choose a tag to compare

View all tags
@hostney hostney released this 24 Sep 05:39
· 3 commits to main since this release
v1.0.5
bb5e363

Security release: the migration token no longer outlives the migration, and a connection ends on its own after 7 days. Recommended for everyone who has the plugin installed.

What's new

  • Security: the migration token is deleted from your site when the migration is over. Hostney now tells the plugin to disconnect when a migration completes, fails for good or is cancelled, and when its token is revoked or expires. Until now the token stayed in your site's settings until you clicked Disconnect or deactivated the plugin.
  • Security: a connection now ends on its own 7 days after you connected, even if Hostney cannot reach your site to disconnect it.
  • Security: the plugin's REST API endpoints now exist only while a token is stored.
  • Security: the file reader's check that a file sits inside your WordPress folder no longer accepts a neighbouring folder whose name starts the same way.
  • Fixed: failed sign-in attempts by other visitors behind the same proxy (Cloudflare, for example) could pause a running migration for up to a minute. A correctly signed request is never held back by someone else's failures now.
  • Fixed: every request was counted twice against the rate limit, and every failed sign-in twice against the lockout, because WordPress checks a route's permissions a second time after answering it. The limit of 900 requests a minute was really 450, which a migration could reach and then have to wait out.
  • Changed: when Hostney asks for it, database tables are exported in key order, one page strictly after the last. Rows added or removed on a busy site during the migration can no longer shift the pages, and tables whose primary key has more than one column are no longer split part-way through a key.

Upgrading

  • A site connected with 1.0.4 stays connected after the update. Its 7 days start counting from the update, so a migration in progress is not interrupted.
  • When Hostney ends a connection, or it expires, Tools -> Hostney Migration says why. To migrate again, generate a new token in the Hostney control panel and connect with it.

Requirements

  • WordPress 5.0+ (tested up to 7.1)
  • PHP 7.4+

Installation

The recommended route is the WordPress.org directory (Plugins -> Add New -> search "Hostney Migration"), which gives you automatic updates.

To install this build manually:

  1. Download hostney-migration.zip from this release
  2. In WordPress admin: Plugins -> Add New -> Upload Plugin
  3. Upload the ZIP and activate
  4. Go to Tools -> Hostney Migration
  5. Paste your migration token from the Hostney control panel

Verify the download

SHA256  484aab840d9d2a421280597394416de6c525df19e717901df72d71e51377b90b  hostney-migration.zip

Full changelog: v1.0.4...v1.0.5

Assets 3
Loading