Update without giving web write access

I consider giving web application write access to it’s own files as fundamentaly broken from security perspective - that’s just too high risk I’m not willing to accept.

But I would also like to have application up-to-date. Right now, when there is an update I log into server, temporarily set those permissions, do update and remove them. Which is lot of unnecessary manual work.

Is there some way I can run those updates from command line, launched from cron?


You can update directly by replacing all files with the latest version on the server and then running the database upgrades from the comandline.


1 Like