With the release of WordPress 4.0.1 all my sites got auto upgraded even if none visited them and all those websites are behind browser authentication.

My sites are not broken but I am just curious to know how WordPress auto-upgrades the sites which are behind browser authentication.


In order for the update to occur, the site would have had to receive some form of traffic. Any traffic which loaded WordPress would do. Alternatively, anything which started the wp-cron.php process would trigger the update as well, like if you have it set to run that with a normal cron.

  • Hi Thank you for the answer. I was thinking of the same procress but the problem is the sites were upgraded in the midnight and we were not working at that time. I believe, in order to trigger wp-cron.php, someone has to visit the site. Is that right?
    – Karthik
    Nov 21 '14 at 13:10
  • Someone or something has to make an http request which starts WordPress, yes. Doesn't have to be a person. Anything which hits the server will do the job.
    – Otto
    Nov 21 '14 at 15:44

Not the answer you're looking for? Browse other questions tagged or ask your own question.