Editing Drupal (section)

===Auto-update notification===
Drupal can automatically notify the administrator about new versions of modules, themes, or the Drupal core.<ref name=sixnewfeatures/> It's important to update quickly after security updates are released.

Before updating it is highly recommended to take backup of core, modules, theme, files and database. If there is any error shown after update or if the new update is not compatible with a module, then it can be quickly replaced by a backup. There are several backup modules available in Drupal.

On 15 October 2014, an SQL injection vulnerability was announced and update was released.<ref name="sql-injection-vulnerability">{{cite web |url=https://www.drupal.org/SA-CORE-2014-005 |title=SA-CORE-2014-005 - Drupal core - SQL injection |newspaper=Https |date=15 October 2014 |access-date= 3 December 2014}}</ref> Two weeks later the Drupal security team released an advisory explaining that everyone should act under the assumption that any site not updated within 7 hours of the announcement was compromised by automated attacks.<ref name="sql-injection-exploited">{{cite web |url=https://www.drupal.org/PSA-2014-003 |title=Drupal Core - Highly Critical - Public Service announcement - PSA-2014-003 |newspaper=Https |date=29 October 2014 |access-date= 3 December 2014}}</ref> Thus, it can be extremely important to apply these updates quickly and usage of a tool like [[drush]] to make this process easier is highly recommended.