#!/bin/bash
# pre-update-checks.sh - Validate system before updates

echo "Running pre-update checks..."

# Check WordPress is installed
if ! wp core is-installed 2>/dev/null; then
    echo "✗ WordPress not installed"
    exit 1
fi

# Check database connection
if ! wp db check 2>/dev/null; then
    echo "✗ Database connection failed"
    exit 1
fi

# Check disk space (need at least 500MB)
AVAILABLE=$(df /var/www | tail -1 | awk '{print $4}')
if [ "$AVAILABLE" -lt 500000 ]; then
    echo "✗ Insufficient disk space: ${AVAILABLE}KB available"
    exit 1
fi

# Check WP-CLI version
WP_CLI_VERSION=$(wp cli version --allow-root 2>/dev/null | grep -oP '\d+\.\d+\.\d+')
echo "WP-CLI version: $WP_CLI_VERSION"

# Check for maintenance mode
if [ -f ".maintenance" ]; then
    echo "✗ Site already in maintenance mode"
    exit 1
fi

echo "✓ All pre-update checks passed"

# Check WordPress core updates
CORE_UPDATE=$(wp core check-update --format=count)
echo "Core updates available: $CORE_UPDATE"

# Check plugin updates
PLUGIN_UPDATES=$(wp plugin list --update=available --format=count)
echo "Plugin updates available: $PLUGIN_UPDATES"

# Check theme updates
THEME_UPDATES=$(wp theme list --update=available --format=count)
echo "Theme updates available: $THEME_UPDATES"

# List specific updates
if [ "$PLUGIN_UPDATES" -gt 0 ]; then
    echo "Plugins requiring updates:"
    wp plugin list --update=available --fields=name,version,update_version
fi

#!/bin/bash
# backup-before-update.sh

set -euo pipefail

SITE_PATH="/var/www/html"
BACKUP_DIR="/backups/pre-update"
DATE=$(date +%Y%m%d_%H%M%S)
BACKUP_NAME="backup-$DATE"

mkdir -p "$BACKUP_DIR"
cd "$SITE_PATH"

echo "Creating pre-update backup..."

# Export database
echo "Backing up database..."
wp db export "$BACKUP_DIR/$BACKUP_NAME.sql.gz"

# Verify database backup
DB_SIZE=$(stat -c%s "$BACKUP_DIR/$BACKUP_NAME.sql.gz")
if [ "$DB_SIZE" -lt 1000 ]; then
    echo "✗ Database backup too small, aborting"
    exit 1
fi

# Backup critical files
echo "Backing up files..."
tar -czf "$BACKUP_DIR/$BACKUP_NAME-files.tar.gz" \
    wp-content/plugins \
    wp-content/themes \
    wp-content/uploads \
    wp-config.php

# Verify file backup
FILE_SIZE=$(stat -c%s "$BACKUP_DIR/$BACKUP_NAME-files.tar.gz")
if [ "$FILE_SIZE" -lt 10000 ]; then
    echo "✗ File backup too small, aborting"
    exit 1
fi

# Create backup manifest
cat > "$BACKUP_DIR/$BACKUP_NAME-manifest.txt" <<EOF
Backup Created: $(date)
WordPress Version: $(wp core version)
Database Size: $(du -h "$BACKUP_DIR/$BACKUP_NAME.sql.gz" | cut -f1)
Files Size: $(du -h "$BACKUP_DIR/$BACKUP_NAME-files.tar.gz" | cut -f1)
Site URL: $(wp option get siteurl)
EOF

echo "✓ Backup complete: $BACKUP_NAME"
echo "$BACKUP_NAME" > /tmp/last-backup-name.txt

#!/bin/bash
# verify-backup.sh

BACKUP_NAME=$(cat /tmp/last-backup-name.txt)
BACKUP_DIR="/backups/pre-update"

echo "Verifying backup: $BACKUP_NAME"

# Test database file integrity
if gunzip -t "$BACKUP_DIR/$BACKUP_NAME.sql.gz" 2>/dev/null; then
    echo "✓ Database backup integrity OK"
else
    echo "✗ Database backup corrupted"
    exit 1
fi

# Test tarball integrity
if tar -tzf "$BACKUP_DIR/$BACKUP_NAME-files.tar.gz" >/dev/null 2>&1; then
    echo "✓ File backup integrity OK"
else
    echo "✗ File backup corrupted"
    exit 1
fi

echo "✓ Backup verification complete"

#!/bin/bash
# safe-update.sh - Update with automatic rollback on failure

set -e

SITE_PATH="/var/www/html"
LOG_FILE="/var/log/wp-updates.log"

log() {
    echo "[$(date '+%Y-%m-%d %H:%M:%S')] $@" | tee -a "$LOG_FILE"
}

rollback() {
    log "ERROR: Update failed, initiating rollback..."

    BACKUP_NAME=$(cat /tmp/last-backup-name.txt)
    BACKUP_DIR="/backups/pre-update"

    # Restore database
    cd "$SITE_PATH"
    wp db import "$BACKUP_DIR/$BACKUP_NAME.sql.gz"

    # Restore files
    tar -xzf "$BACKUP_DIR/$BACKUP_NAME-files.tar.gz" -C "$SITE_PATH"

    # Clear caches
    wp cache flush
    wp rewrite flush

    log "✓ Rollback complete, site restored"
    exit 1
}

# Register rollback on error
trap rollback ERR

cd "$SITE_PATH"

log "=== WordPress Update Started ==="

# Pre-update checks
bash /usr/local/bin/pre-update-checks.sh

# Create backup
bash /usr/local/bin/backup-before-update.sh

# Verify backup
bash /usr/local/bin/verify-backup.sh

# Enable maintenance mode
wp maintenance-mode activate

log "Updating WordPress core..."
wp core update

log "Updating plugins..."
wp plugin update --all

log "Updating themes..."
wp theme update --all

# Verify WordPress still works
if ! wp core is-installed; then
    log "✗ WordPress verification failed"
    rollback
fi

# Test database
if ! wp db check; then
    log "✗ Database check failed"
    rollback
fi

# Disable maintenance mode
wp maintenance-mode deactivate

# Clear caches
wp cache flush
wp rewrite flush

log "=== Update Complete Successfully ==="

#!/bin/bash
# staged-update.sh - Update staging first, then production

STAGING_PATH="/var/www/staging"
PROD_PATH="/var/www/production"

echo "Stage 1: Updating staging environment..."
cd "$STAGING_PATH"
bash /usr/local/bin/safe-update.sh

# Wait for manual verification
echo "Staging updated. Please verify functionality."
read -p "Proceed with production update? (y/n) " -n 1 -r
echo

if [[ ! $REPLY =~ ^[Yy]$ ]]; then
    echo "Production update cancelled"
    exit 0
fi

echo "Stage 2: Updating production..."
cd "$PROD_PATH"
bash /usr/local/bin/safe-update.sh

echo "✓ Staged rollout complete"

#!/bin/bash
# post-update-validation.sh

SITE_URL=$(wp option get siteurl)

echo "Running post-update validation..."

# Check WordPress core
if wp core verify-checksums 2>/dev/null; then
    echo "✓ WordPress core files intact"
else
    echo "✗ Core file verification failed"
    exit 1
fi

# Check database
if wp db check 2>/dev/null; then
    echo "✓ Database healthy"
else
    echo "✗ Database issues detected"
    exit 1
fi

# Test site accessibility
HTTP_CODE=$(curl -s -o /dev/null -w "%{http_code}" "$SITE_URL")
if [ "$HTTP_CODE" -eq 200 ]; then
    echo "✓ Site accessible (HTTP $HTTP_CODE)"
else
    echo "✗ Site not accessible (HTTP $HTTP_CODE)"
    exit 1
fi

# Check admin panel
ADMIN_URL="${SITE_URL}/wp-admin/"
ADMIN_CODE=$(curl -s -o /dev/null -w "%{http_code}" "$ADMIN_URL")
if [ "$ADMIN_CODE" -eq 200 ] || [ "$ADMIN_CODE" -eq 302 ]; then
    echo "✓ Admin panel accessible"
else
    echo "✗ Admin panel issues (HTTP $ADMIN_CODE)"
fi

# Check critical pages
CRITICAL_PAGES=("/" "/about" "/contact")
for PAGE in "${CRITICAL_PAGES[@]}"; do
    URL="${SITE_URL}${PAGE}"
    CODE=$(curl -s -o /dev/null -w "%{http_code}" "$URL")

    if [ "$CODE" -eq 200 ]; then
        echo "✓ $PAGE accessible"
    else
        echo "✗ $PAGE failed (HTTP $CODE)"
    fi
done

echo "✓ Post-update validation complete"

#!/bin/bash
# test-critical-functionality.sh

cd /var/www/html

echo "Testing critical WordPress functionality..."

# Test plugin activation
TEST_PLUGIN="hello-dolly"
if wp plugin is-installed $TEST_PLUGIN; then
    if wp plugin activate $TEST_PLUGIN 2>/dev/null; then
        echo "✓ Plugin activation works"
        wp plugin deactivate $TEST_PLUGIN 2>/dev/null
    else
        echo "✗ Plugin activation failed"
        exit 1
    fi
fi

# Test post creation
TEST_POST=$(wp post create \
    --post_title="Test Post" \
    --post_content="Testing functionality" \
    --post_status=draft \
    --porcelain 2>/dev/null)

if [ -n "$TEST_POST" ]; then
    echo "✓ Post creation works"
    wp post delete $TEST_POST --force
else
    echo "✗ Post creation failed"
    exit 1
fi

# Test cache flush
if wp cache flush 2>/dev/null; then
    echo "✓ Cache operations work"
else
    echo "✗ Cache operations failed"
fi

echo "✓ Functionality tests passed"

#!/bin/bash
# update-report.sh - Generate update status report

REPORT_FILE="/tmp/update-report-$(date +%Y%m%d).txt"
ADMIN_EMAIL="admin@example.com"

{
    echo "WordPress Update Report"
    echo "Generated: $(date)"
    echo "========================"
    echo ""

    echo "WordPress Version:"
    wp core version --extra
    echo ""

    echo "Plugin Status:"
    wp plugin list --format=table
    echo ""

    echo "Theme Status:"
    wp theme list --format=table
    echo ""

    echo "Update Check:"
    CORE_UPDATES=$(wp core check-update --format=count)
    PLUGIN_UPDATES=$(wp plugin list --update=available --format=count)
    THEME_UPDATES=$(wp theme list --update=available --format=count)

    echo "Core updates available: $CORE_UPDATES"
    echo "Plugin updates available: $PLUGIN_UPDATES"
    echo "Theme updates available: $THEME_UPDATES"
    echo ""

    if [ "$PLUGIN_UPDATES" -gt 0 ]; then
        echo "Plugins Needing Updates:"
        wp plugin list --update=available --fields=name,version,update_version
        echo ""
    fi

} > "$REPORT_FILE"

# Email report
mail -s "WordPress Update Report" "$ADMIN_EMAIL" < "$REPORT_FILE"

echo "✓ Update report sent to $ADMIN_EMAIL"

#!/bin/bash
# notify-update-failure.sh

ADMIN_EMAIL="admin@example.com"
SITE_NAME=$(wp option get blogname)
SITE_URL=$(wp option get siteurl)

ERROR_MSG="WordPress Update Failure Alert

Site: $SITE_NAME
URL: $SITE_URL
Time: $(date)
Server: $(hostname)

A WordPress update has failed and the site has been rolled back to the previous state.

Please investigate immediately and review the update logs.

Log file: /var/log/wp-updates.log"

echo "$ERROR_MSG" | mail -s "URGENT: WordPress Update Failed on $SITE_NAME" "$ADMIN_EMAIL"

#!/bin/bash
# master-update-automation.sh

set -euo pipefail

SITE_PATH="/var/www/html"
BACKUP_DIR="/backups/pre-update"
LOG_FILE="/var/log/wp-updates.log"
ADMIN_EMAIL="admin@example.com"

log() {
    echo "[$(date '+%Y-%m-%d %H:%M:%S')] $@" | tee -a "$LOG_FILE"
}

send_failure_alert() {
    echo "WordPress update failed on $(hostname) at $(date)" | \
        mail -s "WordPress Update Failure" "$ADMIN_EMAIL"
}

# Error handler
error_handler() {
    log "ERROR: Update failed at line $1"
    send_failure_alert
    exit 1
}

trap 'error_handler ${LINENO}' ERR

cd "$SITE_PATH"

log "=== Automated WordPress Update Started ==="

# Pre-update checks
log "Running pre-update checks..."
bash /usr/local/bin/pre-update-checks.sh

# Create backup
log "Creating backup..."
bash /usr/local/bin/backup-before-update.sh

# Verify backup
log "Verifying backup..."
bash /usr/local/bin/verify-backup.sh

# Enable maintenance mode
log "Enabling maintenance mode..."
wp maintenance-mode activate

# Update WordPress
log "Updating WordPress core..."
if wp core check-update --format=count | grep -q "^0
quot;; then
    log "WordPress core already up to date"
else
    wp core update
fi

# Update plugins (exclude problematic ones)
log "Updating plugins..."
EXCLUDE="woocommerce,elementor"  # Plugins to update manually
wp plugin update --all --exclude="$EXCLUDE"

# Update themes
log "Updating themes..."
wp theme update --all

# Post-update validation
log "Running post-update validation..."
bash /usr/local/bin/post-update-validation.sh

# Disable maintenance mode
log "Disabling maintenance mode..."
wp maintenance-mode deactivate

# Clear all caches
wp cache flush
wp rewrite flush

# Cleanup old backups (keep last 7)
find "$BACKUP_DIR" -name "backup-*" -mtime +7 -delete

log "=== Update Complete Successfully ==="

# Send success report
bash /usr/local/bin/update-report.sh

# Run updates Sunday 3 AM
0 3 * * 0 /usr/local/bin/master-update-automation.sh