Site-specific notes: Blocksy Pro license is Ben’s own (agency_v2, DB-resident, protected by hh-blocksy-fs-protect.php mu-plugin); PublicSquare state-length fix mu-plugin (hh-publicsquare-state-fix.php); free blocksy-companion kept DELETED.
Updates
2026-09-28 — first run on the master runbook — staging ✅ · LIVE ✅ — WP 7.0.6 → 7.1.2 (major), 35 plugins, Blocksy 2.1.57, FiboSearch genuine 1.34.2, kadence hold lifted — detail post
2026-08-11 — EMERGENCY run triggered by a Kinsta malware-repair notice + 24h update deadline — LIVE complete (staging bypassed; SEOPress Pro is domain-locked) · 18 plugins + Blocksy pair 2.1.52 + Forminator Pro 1.57.0 + Fluid Checkout Pro 4.0.5 + SEOPress pair 10.1/10.1.1 (LIVE) · Kinsta’s “malware” was our own nulled Kadence Blocks Pro (byte-identical to the vault copy; 487-file diff, zero added files) — no intrusion found across two passes · issues: publicly exposed php_ver.php phpinfo removed, 3 transient opcache fatals, 3 licence-blocked plugins (Product Add-Ons Ultimate / Waitlist / Conditional Shipping) · View full update →