Mejora tu sitioWORDPRESS · WEB · IDEAS
English

Care & security

Rehearse a restore before you need one

A recovery exercise should be isolated from real customers and services.

The first restore attempt should not happen while customers are waiting for the site to return. A rehearsal reveals missing files, inaccessible credentials and unclear instructions when there is still time to correct them. It also tells you what the backup does not cover.

Choose a representative backup set and a separate environment. Do not restore over the live website as an experiment. Confirm that the test environment has enough storage and a compatible database and PHP setup for the copy being restored. The hosting provider's instructions should guide the environment-specific steps.

Before opening the restored site, control its external connections. A copy can contain real email settings, payment credentials, scheduled messages and integrations. Disable or redirect those actions through supported test arrangements so the rehearsal does not send old notifications or interact with real transactions.

Verify more than the homepage

Start with access: can the authorized maintainer log in, and do the expected roles remain? Then inspect an older article, a recent article, several uploaded files and one feature that stores its own data. A homepage can look correct even when a large part of the media library or an extension's tables are missing.

Use a small record of expected content. For example, identify a recent post title, an older PDF and an invented test form entry that should exist in the chosen backup. Check those items after restoration. This is more informative than browsing at random and deciding the copy feels familiar.

Isolate external actions, restore the backup, verify representative records and document gaps before removing the test copy.
Explanatory diagramA protected rehearsal should check more than the homepage. Choose specific examples that the backup is expected to contain. Open the image to see the full detail.
Read the diagram as text
  • Isolate the environment: Protect access; disable or reroute real mail, payments and integrations.
  • Restore the selected set: Use its documented files, database, configuration and required keys.
  • Check named examples: Confirm login, an old upload, a recent article and relevant plugin data.
  • Record and clean up: Resolve missing pieces, retain the report and remove the obsolete test copy.

If real services are contacted unexpectedly, pause and fix isolation first.

Keep the restored site private. Discouraging search engines is not an access barrier, and copied customer records should not become publicly available through a temporary address. Use the protection appropriate to the hosting environment and limit who can enter.

Record the sequence, the backup used, the time required and every manual adjustment. Distinguish time spent downloading from time spent fixing missing information. If recovery depends on an undocumented vendor action, add that dependency to the plan.

Suppose the rehearsal restores all articles but a document download returns an error. Follow the stored link and determine whether the document was part of WordPress uploads, an external storage account or a directory excluded by the backup. This is a specific gap to fix. Repeating the whole restore without identifying the missing location is unlikely to change the result.

A recovery exercise can also reveal an ownership problem. The archive may be accessible only through a developer's account, or its encryption key may be known only to one person. Resolve those dependencies while that person is available. Document an authorized alternative without distributing the secret more widely than necessary.

If the live site keeps accepting transactions, write down how the team would reconcile records created after the chosen backup. A rehearsal does not need to process real payments to expose this question. Use invented records at different times and explain which would be retained, recovered separately or lost. That boundary is often more important to the business than the time taken to copy files.

Keep a stopping point in the exercise. If the restored copy starts contacting live services unexpectedly, pause it and correct the isolation before continuing. Completing the rehearsal is less important than preventing the test from becoming a second operational site.

After the exercise, remove the temporary environment and its data through the normal hosting process when it is no longer needed. Preserve the report and correct the backup configuration if gaps appeared. Repeat the rehearsal after a substantial platform or backup-method change, rather than assuming that one successful restore proves every future copy will work.