#!/bin/bash
# verify-core-integrity.sh

echo "WordPress Core Integrity Check"
echo "==============================="

# Verify core file checksums
if wp core verify-checksums; then
    echo "✓ Core files verified - no modifications detected"
else
    echo "✗ ALERT: Core files modified or corrupted"
    echo "Details:"
    wp core verify-checksums --format=json | jq -r '.[] | "  - \(.)"'

    # Send alert
    echo "Core file integrity check failed on $(hostname)" | \
        mail -s "WordPress Security Alert" admin@example.com
fi

#!/bin/bash
# daily-integrity-check.sh

LOG_FILE="/var/log/wp-security.log"

log() {
    echo "[$(date '+%Y-%m-%d %H:%M:%S')] $@" | tee -a "$LOG_FILE"
}

log "Starting core integrity check"

# Check WordPress core
if ! wp core verify-checksums 2>&1 | tee -a "$LOG_FILE"; then
    log "✗ Core integrity check FAILED"

    # Create detailed report
    {
        echo "WordPress Core Integrity Failure"
        echo "================================="
        echo "Timestamp: $(date)"
        echo "Server: $(hostname)"
        echo "WordPress version: $(wp core version)"
        echo ""
        echo "Modified files:"
        wp core verify-checksums 2>&1 | grep "^Error:"
    } | mail -s "URGENT: WordPress Core Modified" security@example.com

    exit 1
fi

log "✓ Core integrity check passed"

#!/bin/bash
# scan-vulnerabilities.sh

echo "WordPress Vulnerability Scan"
echo "============================"

# Check if WPScan CLI is available
if ! command -v wpscan &> /dev/null; then
    echo "Installing WPScan..."
    gem install wpscan
fi

# Update WPScan database
wpscan --update

# Scan WordPress installation
SCAN_RESULTS=$(wpscan --url "$(wp option get siteurl)" \
    --format json \
    --random-user-agent \
    --disable-tls-checks)

# Parse vulnerabilities
VULN_COUNT=$(echo "$SCAN_RESULTS" | jq '.plugins | to_entries[] | select(.value.vulnerabilities | length > 0) | .value.vulnerabilities | length' | awk '{s+=$1} END {print s}')

if [ "$VULN_COUNT" -gt 0 ]; then
    echo "✗ ALERT: $VULN_COUNT vulnerabilities detected"

    # Generate detailed report
    echo "$SCAN_RESULTS" | jq -r '.plugins | to_entries[] | select(.value.vulnerabilities | length > 0) | "Plugin: \(.key)\nVulnerabilities:\n\(.value.vulnerabilities[] | "  - \(.title) (Severity: \(.vuln_type))\n    Fixed in: \(.fixed_in // "No fix available")\n")"'

else
    echo "✓ No known vulnerabilities detected"
fi

#!/bin/bash
# check-security-updates.sh

echo "Checking for security updates..."

# Get plugins with available updates
UPDATES=$(wp plugin list --update=available --format=json)

if [ "$UPDATES" != "[]" ]; then
    echo "Plugins with available updates:"
    echo "$UPDATES" | jq -r '.[] | "- \(.name) (Current: \(.version), Available: \(.update_version))"'

    # Check update changelogs for security keywords
    echo ""
    echo "Checking changelogs for security mentions..."

    echo "$UPDATES" | jq -r '.[].name' | while read PLUGIN; do
        CHANGELOG=$(wp plugin get "$PLUGIN" --field=update_changelog 2>/dev/null)

        if echo "$CHANGELOG" | grep -qi 'security\|vulnerability\|xss\|sql injection\|exploit'; then
            echo "⚠ SECURITY UPDATE AVAILABLE: $PLUGIN"
            echo "  Update immediately using: wp plugin update $PLUGIN"
        fi
    done
else
    echo "✓ All plugins up to date"
fi

#!/bin/bash
# create-file-baseline.sh - Create baseline of file checksums

BASELINE_FILE="/var/backups/wp-file-baseline.txt"
WP_PATH="/var/www/html"

echo "Creating file integrity baseline..."

cd "$WP_PATH"

# Generate checksums for all WordPress files
find . -type f \
    -not -path "./wp-content/uploads/*" \
    -not -path "./wp-content/cache/*" \
    -not -path "./wp-content/backup/*" \
    -exec md5sum {} \; | sort > "$BASELINE_FILE"

echo "✓ Baseline created: $BASELINE_FILE"
echo "Total files: $(wc -l < $BASELINE_FILE)"

#!/bin/bash
# detect-file-changes.sh

BASELINE_FILE="/var/backups/wp-file-baseline.txt"
WP_PATH="/var/www/html"
REPORT_FILE="/tmp/file-changes-$(date +%Y%m%d).txt"

if [ ! -f "$BASELINE_FILE" ]; then
    echo "ERROR: Baseline file not found. Run create-file-baseline.sh first."
    exit 1
fi

echo "Scanning for file changes..."

cd "$WP_PATH"

# Generate current checksums
find . -type f \
    -not -path "./wp-content/uploads/*" \
    -not -path "./wp-content/cache/*" \
    -not -path "./wp-content/backup/*" \
    -exec md5sum {} \; | sort > /tmp/current-checksums.txt

# Compare with baseline
{
    echo "WordPress File Change Report"
    echo "============================="
    echo "Date: $(date)"
    echo ""

    # Modified files
    echo "Modified Files:"
    comm -13 "$BASELINE_FILE" /tmp/current-checksums.txt | awk '{print $2}' | while read file; do
        if grep -q "$file" "$BASELINE_FILE"; then
            echo "  MODIFIED: $file"
        fi
    done

    echo ""

    # New files
    echo "New Files:"
    comm -13 "$BASELINE_FILE" /tmp/current-checksums.txt | awk '{print $2}' | while read file; do
        if ! grep -q "$file" "$BASELINE_FILE"; then
            echo "  ADDED: $file"
        fi
    done

    echo ""

    # Deleted files
    echo "Deleted Files:"
    comm -23 "$BASELINE_FILE" /tmp/current-checksums.txt | awk '{print $2}' | while read file; do
        echo "  DELETED: $file"
    done

} > "$REPORT_FILE"

# Check if changes detected
CHANGE_COUNT=$(cat "$REPORT_FILE" | grep -c "MODIFIED:\|ADDED:\|DELETED:")

if [ "$CHANGE_COUNT" -gt 0 ]; then
    echo "✗ ALERT: $CHANGE_COUNT file changes detected"
    echo "Report: $REPORT_FILE"

    # Email report
    mail -s "WordPress File Changes Detected" admin@example.com < "$REPORT_FILE"
else
    echo "✓ No file changes detected"
fi

# Cleanup
rm /tmp/current-checksums.txt

#!/bin/bash
# scan-malware.sh - Detect common malware patterns

WP_PATH="/var/www/html"
REPORT_FILE="/tmp/malware-scan-$(date +%Y%m%d).txt"

echo "WordPress Malware Scan"
echo "======================"

# Suspicious patterns to check
declare -a PATTERNS=(
    "eval(base64_decode"
    "eval(gzinflate"
    "eval(str_rot13"
    "system(\$_"
    "shell_exec"
    "passthru"
    "base64_decode.*eval"
    "FilesMan"
    "r57shell"
    "c99shell"
    "WSO shell"
)

{
    echo "Malware Scan Report"
    echo "==================="
    echo "Date: $(date)"
    echo "Path: $WP_PATH"
    echo ""

    for PATTERN in "${PATTERNS[@]}"; do
        echo "Checking for: $PATTERN"

        MATCHES=$(grep -r -l -i "$PATTERN" "$WP_PATH" \
            --exclude-dir=wp-content/uploads \
            --exclude-dir=wp-content/cache \
            --exclude-dir=node_modules \
            --include="*.php" 2>/dev/null)

        if [ ! -z "$MATCHES" ]; then
            echo "✗ SUSPICIOUS: Files matching '$PATTERN':"
            echo "$MATCHES" | while read file; do
                echo "  - $file"
            done
            echo ""
        fi
    done

} > "$REPORT_FILE"

# Check if suspicious files found
SUSPICIOUS_COUNT=$(grep -c "✗ SUSPICIOUS:" "$REPORT_FILE" || echo 0)

if [ "$SUSPICIOUS_COUNT" -gt 0 ]; then
    echo "✗ ALERT: Potential malware detected"
    echo "Report: $REPORT_FILE"

    # Send alert
    mail -s "URGENT: Potential Malware Detected" security@example.com < "$REPORT_FILE"
else
    echo "✓ No malware patterns detected"
fi

#!/bin/bash
# check-suspicious-files.sh

WP_PATH="/var/www/html"

echo "Checking for suspicious files..."

# Check for unusual file types in wp-content
echo "Checking for executable files in wp-content..."
find "$WP_PATH/wp-content" \
    -type f \
    \( -name "*.exe" -o -name "*.sh" -o -name "*.bat" \) \
    -print

# Check for PHP files in uploads directory
echo "Checking for PHP files in uploads..."
find "$WP_PATH/wp-content/uploads" -name "*.php" -print

# Check for recently modified files (last 24 hours)
echo "Recently modified PHP files (last 24 hours)..."
find "$WP_PATH" -name "*.php" -mtime -1 -type f -print

# Check for files with suspicious permissions
echo "Files with 777 permissions..."
find "$WP_PATH" -type f -perm 0777 -print

#!/bin/bash
# audit-users.sh

echo "WordPress User Security Audit"
echo "=============================="

# Check for users with admin privileges
echo "Administrator Accounts:"
wp user list --role=administrator --format=table --fields=ID,user_login,user_email,user_registered

ADMIN_COUNT=$(wp user list --role=administrator --format=count)
if [ "$ADMIN_COUNT" -gt 3 ]; then
    echo "⚠ WARNING: $ADMIN_COUNT administrator accounts (recommended: 1-2)"
fi

echo ""

# Check for weak usernames
echo "Checking for common/weak usernames..."
WEAK_USERS=("admin" "administrator" "root" "test" "demo")

for USERNAME in "${WEAK_USERS[@]}"; do
    if wp user get "$USERNAME" &>/dev/null; then
        echo "✗ WARNING: Common username detected: $USERNAME"
        echo "  Recommended: Delete or rename this account"
    fi
done

echo ""

# Check for inactive admin accounts
echo "Inactive Administrator Accounts (no posts/pages):"
wp user list --role=administrator --format=json | \
    jq -r '.[] | select(.posts == "0") | "- \(.user_login) (registered: \(.user_registered))"'

echo ""

# Check user capabilities
echo "Users with 'delete_users' capability:"
wp user list --format=json | \
    jq -r '.[] | select(.roles[] | contains("administrator")) | .user_login'

#!/bin/bash
# check-password-policy.sh

echo "Password Policy Check"
echo "===================="

# This requires custom code to check password strength
# WordPress doesn't expose password hashes via WP-CLI for security

# Check for recent password changes
echo "Users who haven't changed password recently:"
# This would require custom user meta tracking

# Check for 2FA status (if plugin installed)
if wp plugin is-installed two-factor; then
    echo "2FA Status:"
    wp user list --format=json | \
        jq -r '.[] | "\(.user_login): \(if .two_factor_enabled then "Enabled" else "DISABLED" end)"'
fi

# List users who can install plugins/themes
echo ""
echo "Users with plugin/theme installation privileges:"
wp user list --role=administrator,editor --format=csv --fields=user_login,roles

#!/bin/bash
# comprehensive-security-check.sh

REPORT_FILE="/tmp/wordpress-security-report-$(date +%Y%m%d).txt"
LOG_FILE="/var/log/wp-security.log"

log() {
    echo "[$(date '+%Y-%m-%d %H:%M:%S')] $@" | tee -a "$LOG_FILE"
}

{
    echo "WordPress Comprehensive Security Report"
    echo "========================================"
    echo "Generated: $(date)"
    echo "Server: $(hostname)"
    echo ""

    # Core integrity
    echo "1. Core File Integrity"
    echo "----------------------"
    if wp core verify-checksums; then
        echo "✓ PASS: Core files verified"
    else
        echo "✗ FAIL: Core file modifications detected"
    fi
    echo ""

    # Plugin security
    echo "2. Plugin Security"
    echo "------------------"
    PLUGIN_UPDATES=$(wp plugin list --update=available --format=count)
    echo "Plugins needing updates: $PLUGIN_UPDATES"

    if [ "$PLUGIN_UPDATES" -eq 0 ]; then
        echo "✓ PASS: All plugins up to date"
    else
        echo "⚠ WARNING: Plugin updates available"
        wp plugin list --update=available --format=table --fields=name,version,update_version
    fi
    echo ""

    # Theme security
    echo "3. Theme Security"
    echo "-----------------"
    THEME_UPDATES=$(wp theme list --update=available --format=count)
    echo "Themes needing updates: $THEME_UPDATES"
    echo ""

    # User accounts
    echo "4. User Account Security"
    echo "------------------------"
    ADMIN_COUNT=$(wp user list --role=administrator --format=count)
    echo "Administrator accounts: $ADMIN_COUNT"

    if [ "$ADMIN_COUNT" -gt 3 ]; then
        echo "⚠ WARNING: Too many administrator accounts"
    else
        echo "✓ PASS: Administrator count acceptable"
    fi
    echo ""

    # SSL/HTTPS check
    echo "5. SSL/HTTPS Configuration"
    echo "--------------------------"
    SITE_URL=$(wp option get siteurl)
    if [[ "$SITE_URL" == https://* ]]; then
        echo "✓ PASS: HTTPS enabled"
    else
        echo "✗ FAIL: Site not using HTTPS"
    fi
    echo ""

    # File permissions
    echo "6. File Permissions"
    echo "-------------------"
    INSECURE_FILES=$(find . -type f -perm 0777 | wc -l)
    echo "Files with 777 permissions: $INSECURE_FILES"

    if [ "$INSECURE_FILES" -eq 0 ]; then
        echo "✓ PASS: No files with overly permissive permissions"
    else
        echo "⚠ WARNING: Insecure file permissions detected"
    fi
    echo ""

    # WordPress version
    echo "7. WordPress Version"
    echo "--------------------"
    CURRENT_VERSION=$(wp core version)
    LATEST_VERSION=$(wp core check-update --format=json | jq -r '.[0].version // empty')

    echo "Current version: $CURRENT_VERSION"
    echo "Latest version: ${LATEST_VERSION:-$CURRENT_VERSION}"

    if [ -z "$LATEST_VERSION" ]; then
        echo "✓ PASS: WordPress is up to date"
    else
        echo "⚠ WARNING: WordPress update available"
    fi

} > "$REPORT_FILE"

log "Security report generated: $REPORT_FILE"

# Email report
mail -s "WordPress Security Report - $(hostname)" admin@example.com < "$REPORT_FILE"

echo "✓ Security report complete: $REPORT_FILE"

# Add to crontab: crontab -e

# Daily core integrity check at 2 AM
0 2 * * * /usr/local/bin/verify-core-integrity.sh >> /var/log/wp-security.log 2>&1

# Daily vulnerability scan at 3 AM
0 3 * * * /usr/local/bin/scan-vulnerabilities.sh >> /var/log/wp-security.log 2>&1

# Daily file change detection at 4 AM
0 4 * * * /usr/local/bin/detect-file-changes.sh >> /var/log/wp-security.log 2>&1

# Weekly comprehensive security report (Mondays at 8 AM)
0 8 * * 1 /usr/local/bin/comprehensive-security-check.sh

# Monthly user audit (first day of month)
0 9 1 * * /usr/local/bin/audit-users.sh | mail -s "Monthly User Audit" admin@example.com

#!/bin/bash
# pre-update-checks.sh - Validate system before updates

echo "Running pre-update checks..."

# Check WordPress is installed
if ! wp core is-installed 2>/dev/null; then
    echo "✗ WordPress not installed"
    exit 1
fi

# Check database connection
if ! wp db check 2>/dev/null; then
    echo "✗ Database connection failed"
    exit 1
fi

# Check disk space (need at least 500MB)
AVAILABLE=$(df /var/www | tail -1 | awk '{print $4}')
if [ "$AVAILABLE" -lt 500000 ]; then
    echo "✗ Insufficient disk space: ${AVAILABLE}KB available"
    exit 1
fi

# Check WP-CLI version
WP_CLI_VERSION=$(wp cli version --allow-root 2>/dev/null | grep -oP '\d+\.\d+\.\d+')
echo "WP-CLI version: $WP_CLI_VERSION"

# Check for maintenance mode
if [ -f ".maintenance" ]; then
    echo "✗ Site already in maintenance mode"
    exit 1
fi

echo "✓ All pre-update checks passed"

# Check WordPress core updates
CORE_UPDATE=$(wp core check-update --format=count)
echo "Core updates available: $CORE_UPDATE"

# Check plugin updates
PLUGIN_UPDATES=$(wp plugin list --update=available --format=count)
echo "Plugin updates available: $PLUGIN_UPDATES"

# Check theme updates
THEME_UPDATES=$(wp theme list --update=available --format=count)
echo "Theme updates available: $THEME_UPDATES"

# List specific updates
if [ "$PLUGIN_UPDATES" -gt 0 ]; then
    echo "Plugins requiring updates:"
    wp plugin list --update=available --fields=name,version,update_version
fi

#!/bin/bash
# backup-before-update.sh

set -euo pipefail

SITE_PATH="/var/www/html"
BACKUP_DIR="/backups/pre-update"
DATE=$(date +%Y%m%d_%H%M%S)
BACKUP_NAME="backup-$DATE"

mkdir -p "$BACKUP_DIR"
cd "$SITE_PATH"

echo "Creating pre-update backup..."

# Export database
echo "Backing up database..."
wp db export "$BACKUP_DIR/$BACKUP_NAME.sql.gz"

# Verify database backup
DB_SIZE=$(stat -c%s "$BACKUP_DIR/$BACKUP_NAME.sql.gz")
if [ "$DB_SIZE" -lt 1000 ]; then
    echo "✗ Database backup too small, aborting"
    exit 1
fi

# Backup critical files
echo "Backing up files..."
tar -czf "$BACKUP_DIR/$BACKUP_NAME-files.tar.gz" \
    wp-content/plugins \
    wp-content/themes \
    wp-content/uploads \
    wp-config.php

# Verify file backup
FILE_SIZE=$(stat -c%s "$BACKUP_DIR/$BACKUP_NAME-files.tar.gz")
if [ "$FILE_SIZE" -lt 10000 ]; then
    echo "✗ File backup too small, aborting"
    exit 1
fi

# Create backup manifest
cat > "$BACKUP_DIR/$BACKUP_NAME-manifest.txt" <<EOF
Backup Created: $(date)
WordPress Version: $(wp core version)
Database Size: $(du -h "$BACKUP_DIR/$BACKUP_NAME.sql.gz" | cut -f1)
Files Size: $(du -h "$BACKUP_DIR/$BACKUP_NAME-files.tar.gz" | cut -f1)
Site URL: $(wp option get siteurl)
EOF

echo "✓ Backup complete: $BACKUP_NAME"
echo "$BACKUP_NAME" > /tmp/last-backup-name.txt

#!/bin/bash
# verify-backup.sh

BACKUP_NAME=$(cat /tmp/last-backup-name.txt)
BACKUP_DIR="/backups/pre-update"

echo "Verifying backup: $BACKUP_NAME"

# Test database file integrity
if gunzip -t "$BACKUP_DIR/$BACKUP_NAME.sql.gz" 2>/dev/null; then
    echo "✓ Database backup integrity OK"
else
    echo "✗ Database backup corrupted"
    exit 1
fi

# Test tarball integrity
if tar -tzf "$BACKUP_DIR/$BACKUP_NAME-files.tar.gz" >/dev/null 2>&1; then
    echo "✓ File backup integrity OK"
else
    echo "✗ File backup corrupted"
    exit 1
fi

echo "✓ Backup verification complete"

#!/bin/bash
# safe-update.sh - Update with automatic rollback on failure

set -e

SITE_PATH="/var/www/html"
LOG_FILE="/var/log/wp-updates.log"

log() {
    echo "[$(date '+%Y-%m-%d %H:%M:%S')] $@" | tee -a "$LOG_FILE"
}

rollback() {
    log "ERROR: Update failed, initiating rollback..."

    BACKUP_NAME=$(cat /tmp/last-backup-name.txt)
    BACKUP_DIR="/backups/pre-update"

    # Restore database
    cd "$SITE_PATH"
    wp db import "$BACKUP_DIR/$BACKUP_NAME.sql.gz"

    # Restore files
    tar -xzf "$BACKUP_DIR/$BACKUP_NAME-files.tar.gz" -C "$SITE_PATH"

    # Clear caches
    wp cache flush
    wp rewrite flush

    log "✓ Rollback complete, site restored"
    exit 1
}

# Register rollback on error
trap rollback ERR

cd "$SITE_PATH"

log "=== WordPress Update Started ==="

# Pre-update checks
bash /usr/local/bin/pre-update-checks.sh

# Create backup
bash /usr/local/bin/backup-before-update.sh

# Verify backup
bash /usr/local/bin/verify-backup.sh

# Enable maintenance mode
wp maintenance-mode activate

log "Updating WordPress core..."
wp core update

log "Updating plugins..."
wp plugin update --all

log "Updating themes..."
wp theme update --all

# Verify WordPress still works
if ! wp core is-installed; then
    log "✗ WordPress verification failed"
    rollback
fi

# Test database
if ! wp db check; then
    log "✗ Database check failed"
    rollback
fi

# Disable maintenance mode
wp maintenance-mode deactivate

# Clear caches
wp cache flush
wp rewrite flush

log "=== Update Complete Successfully ==="

#!/bin/bash
# staged-update.sh - Update staging first, then production

STAGING_PATH="/var/www/staging"
PROD_PATH="/var/www/production"

echo "Stage 1: Updating staging environment..."
cd "$STAGING_PATH"
bash /usr/local/bin/safe-update.sh

# Wait for manual verification
echo "Staging updated. Please verify functionality."
read -p "Proceed with production update? (y/n) " -n 1 -r
echo

if [[ ! $REPLY =~ ^[Yy]$ ]]; then
    echo "Production update cancelled"
    exit 0
fi

echo "Stage 2: Updating production..."
cd "$PROD_PATH"
bash /usr/local/bin/safe-update.sh

echo "✓ Staged rollout complete"

#!/bin/bash
# post-update-validation.sh

SITE_URL=$(wp option get siteurl)

echo "Running post-update validation..."

# Check WordPress core
if wp core verify-checksums 2>/dev/null; then
    echo "✓ WordPress core files intact"
else
    echo "✗ Core file verification failed"
    exit 1
fi

# Check database
if wp db check 2>/dev/null; then
    echo "✓ Database healthy"
else
    echo "✗ Database issues detected"
    exit 1
fi

# Test site accessibility
HTTP_CODE=$(curl -s -o /dev/null -w "%{http_code}" "$SITE_URL")
if [ "$HTTP_CODE" -eq 200 ]; then
    echo "✓ Site accessible (HTTP $HTTP_CODE)"
else
    echo "✗ Site not accessible (HTTP $HTTP_CODE)"
    exit 1
fi

# Check admin panel
ADMIN_URL="${SITE_URL}/wp-admin/"
ADMIN_CODE=$(curl -s -o /dev/null -w "%{http_code}" "$ADMIN_URL")
if [ "$ADMIN_CODE" -eq 200 ] || [ "$ADMIN_CODE" -eq 302 ]; then
    echo "✓ Admin panel accessible"
else
    echo "✗ Admin panel issues (HTTP $ADMIN_CODE)"
fi

# Check critical pages
CRITICAL_PAGES=("/" "/about" "/contact")
for PAGE in "${CRITICAL_PAGES[@]}"; do
    URL="${SITE_URL}${PAGE}"
    CODE=$(curl -s -o /dev/null -w "%{http_code}" "$URL")

    if [ "$CODE" -eq 200 ]; then
        echo "✓ $PAGE accessible"
    else
        echo "✗ $PAGE failed (HTTP $CODE)"
    fi
done

echo "✓ Post-update validation complete"

#!/bin/bash
# test-critical-functionality.sh

cd /var/www/html

echo "Testing critical WordPress functionality..."

# Test plugin activation
TEST_PLUGIN="hello-dolly"
if wp plugin is-installed $TEST_PLUGIN; then
    if wp plugin activate $TEST_PLUGIN 2>/dev/null; then
        echo "✓ Plugin activation works"
        wp plugin deactivate $TEST_PLUGIN 2>/dev/null
    else
        echo "✗ Plugin activation failed"
        exit 1
    fi
fi

# Test post creation
TEST_POST=$(wp post create \
    --post_title="Test Post" \
    --post_content="Testing functionality" \
    --post_status=draft \
    --porcelain 2>/dev/null)

if [ -n "$TEST_POST" ]; then
    echo "✓ Post creation works"
    wp post delete $TEST_POST --force
else
    echo "✗ Post creation failed"
    exit 1
fi

# Test cache flush
if wp cache flush 2>/dev/null; then
    echo "✓ Cache operations work"
else
    echo "✗ Cache operations failed"
fi

echo "✓ Functionality tests passed"

#!/bin/bash
# update-report.sh - Generate update status report

REPORT_FILE="/tmp/update-report-$(date +%Y%m%d).txt"
ADMIN_EMAIL="admin@example.com"

{
    echo "WordPress Update Report"
    echo "Generated: $(date)"
    echo "========================"
    echo ""

    echo "WordPress Version:"
    wp core version --extra
    echo ""

    echo "Plugin Status:"
    wp plugin list --format=table
    echo ""

    echo "Theme Status:"
    wp theme list --format=table
    echo ""

    echo "Update Check:"
    CORE_UPDATES=$(wp core check-update --format=count)
    PLUGIN_UPDATES=$(wp plugin list --update=available --format=count)
    THEME_UPDATES=$(wp theme list --update=available --format=count)

    echo "Core updates available: $CORE_UPDATES"
    echo "Plugin updates available: $PLUGIN_UPDATES"
    echo "Theme updates available: $THEME_UPDATES"
    echo ""

    if [ "$PLUGIN_UPDATES" -gt 0 ]; then
        echo "Plugins Needing Updates:"
        wp plugin list --update=available --fields=name,version,update_version
        echo ""
    fi

} > "$REPORT_FILE"

# Email report
mail -s "WordPress Update Report" "$ADMIN_EMAIL" < "$REPORT_FILE"

echo "✓ Update report sent to $ADMIN_EMAIL"

#!/bin/bash
# notify-update-failure.sh

ADMIN_EMAIL="admin@example.com"
SITE_NAME=$(wp option get blogname)
SITE_URL=$(wp option get siteurl)

ERROR_MSG="WordPress Update Failure Alert

Site: $SITE_NAME
URL: $SITE_URL
Time: $(date)
Server: $(hostname)

A WordPress update has failed and the site has been rolled back to the previous state.

Please investigate immediately and review the update logs.

Log file: /var/log/wp-updates.log"

echo "$ERROR_MSG" | mail -s "URGENT: WordPress Update Failed on $SITE_NAME" "$ADMIN_EMAIL"

#!/bin/bash
# master-update-automation.sh

set -euo pipefail

SITE_PATH="/var/www/html"
BACKUP_DIR="/backups/pre-update"
LOG_FILE="/var/log/wp-updates.log"
ADMIN_EMAIL="admin@example.com"

log() {
    echo "[$(date '+%Y-%m-%d %H:%M:%S')] $@" | tee -a "$LOG_FILE"
}

send_failure_alert() {
    echo "WordPress update failed on $(hostname) at $(date)" | \
        mail -s "WordPress Update Failure" "$ADMIN_EMAIL"
}

# Error handler
error_handler() {
    log "ERROR: Update failed at line $1"
    send_failure_alert
    exit 1
}

trap 'error_handler ${LINENO}' ERR

cd "$SITE_PATH"

log "=== Automated WordPress Update Started ==="

# Pre-update checks
log "Running pre-update checks..."
bash /usr/local/bin/pre-update-checks.sh

# Create backup
log "Creating backup..."
bash /usr/local/bin/backup-before-update.sh

# Verify backup
log "Verifying backup..."
bash /usr/local/bin/verify-backup.sh

# Enable maintenance mode
log "Enabling maintenance mode..."
wp maintenance-mode activate

# Update WordPress
log "Updating WordPress core..."
if wp core check-update --format=count | grep -q "^0
quot;; then
    log "WordPress core already up to date"
else
    wp core update
fi

# Update plugins (exclude problematic ones)
log "Updating plugins..."
EXCLUDE="woocommerce,elementor"  # Plugins to update manually
wp plugin update --all --exclude="$EXCLUDE"

# Update themes
log "Updating themes..."
wp theme update --all

# Post-update validation
log "Running post-update validation..."
bash /usr/local/bin/post-update-validation.sh

# Disable maintenance mode
log "Disabling maintenance mode..."
wp maintenance-mode deactivate

# Clear all caches
wp cache flush
wp rewrite flush

# Cleanup old backups (keep last 7)
find "$BACKUP_DIR" -name "backup-*" -mtime +7 -delete

log "=== Update Complete Successfully ==="

# Send success report
bash /usr/local/bin/update-report.sh

# Run updates Sunday 3 AM
0 3 * * 0 /usr/local/bin/master-update-automation.sh