Google Drive problem – with Multiple Websites

Hi,

Apologies for the delay.

Have you selected the ‘Rescan Remote Storage’ link at any time?

Hi,

I have rescanned both remote and local and still shows other clients backups – which is hard because they are not named which client. I am relying on it saying View Log next to the actual clients backup.

It also shows old backups for that website that have been deleted.

Once a new backup happens – the “Pruning Old Backup Sets” happens, deleting other client backups.

(I have reauthorised all clients using the new simple way.)

Thanks

• This reply was modified 7 years, 2 months ago by millermedia.
• This reply was modified 7 years, 2 months ago by millermedia.
• This reply was modified 7 years, 2 months ago by millermedia.

Hi,

Showing all backups in the folder is the intended function of the ‘Rescan remote storage’ link: that’s what it’s for. (There are times when you want to do that, e.g. cloning between live + dev versions of a site).

The ‘delete’ code will ignore sites that were picked up through a rescan of remote storage, rather than being locally created. If you believe that’s not happening, then please post a backup log (e.g. using pastebin.com) from a backup run which wrongly deleted a backup, and let us know the filenames of the wrong backup that it touched so that we can analyse the log.

N.B. In UpdraftPlus Premium, you can store your Google Drive backups in customised folders, which can be a good idea if you have 50 clients.

David

Hi

Showing all backups in the folder has two issues.

1) The list of backups in “Existing Backups” does not show the file names – so there is no way of knowing which client / or dev you are restoring.

2) Security – now all my individual clients have access to backups of other clients websites.

This was not an issue until the updates.

I have all clients setup to backup 6 x monthly files / 26 weekly database.
It is only saving 6 files and 26 databases from all clients, and each new backup is deleting “pruning” my other clients files from Google Drive!

https://pastebin.com/Lk0QLKwD

This shows Leanne_Woodman_Carius website files being deleted. The website being backed up is Showtime_Melbourne

Hi,

If click on ‘Restore’, then it’ll tell you the URL of the site that the backup is from before you give final confirmation that you wish to proceed. So, there’s no way to actually carry out a re store without knowing.

Concerning all admin users on all sites having access to backups – that’s an artefact of how Google Drive is designed, unfortunately. From what I’ve read and understood, it’s deliberate. Google intend Google Drive to be a consumer product. For businesses, they have Google Cloud. Whether or not you ever press the ‘rescan’ link, it’s *always* the case, by design (as I say) that a Google Drive token gives you access to the full contents of the drive. So, if your threat model includes malicious clients who have admin access, then there are zillions of ways they can exploit that, to get the token and use it to navigate your entire drive. If that is a concern to you, then you need to use a storage method that’s been built for business use and which handles that concern, such as Google Cloud, Amazon S3 (one key per user), FTP with separate logins (and various others).

David

Hi

So I have to guess which backup is the right one – keep clicking restore until I find the right one!

There was never an issue prior to the update – UpdraftPlus only showed each clients backups. I choose Google Drive over Google Cloud as it sync’s the files on my computer as a local backup.

You have not answered the issue of every time a backup occurs, it deletes another clients backups.

Has the update been designed to be only free for one website essentially – need to pay to use it on multiple?

Hi,

We will add this to our buglist and investigate further.

In the meantime, I would recommend deleting any backups from the Existing Backups list that do not show a ‘View Log’ button.
When doing so, please ensure that you disable the ‘delete from remote storage’ option in the confirmation pop-up.

This will delete the backup record, but not the file in remote storage (the ‘delete from remote storage’ option must be enabled). You will also have to avoid the ‘rescan remote storage’ link.

> There was never an issue prior to the update – UpdraftPlus only showed each clients backups.

If you press the ‘Rescan remote storage’ link, then it will show all backups from all destinations. That has always been the behaviour of that link; that is that link’s designed + intended behaviour. If you do not wish to show other backups that are in the same remote storage, then you need to refrain from clicking on that link.

Concerning the other question, I earlier asked a question for more information on the details (please see my first reply) – can you supply that info?

David

Hello, testifying from another user’s end, I’ve experienced the same problem. The critical issue here is that on running the latest backup, Updraft DELETED ALL OTHER WEBSITE’s BACKUPS that I manage, with no way to recover them. I was lucky none of them had gone down. I’ve experienced this problem in v1.13.12, though in another site running v1.13.11 also it is listing other websites’ backups (identifiable by missing “View log” buttons). So the problem may have crept in earlier.

Some code change has happened by which the plugin now only sees the date/time stamp, does not check the name of the site in the filename. Request to developers Please fix this ASAP or show how to revert the plugin to a previous version where this issue didn’t happen.

One workaround I’ve done is set the Updraft settings in all my sites to retain 100 previous backups. It’s important to go set this everywhere as even one site having lower setting will wipe out all the other backups. If you have 5 websites, then 100/5 = 20 of the latest backups (for the specific db, plugins, themes, uploads or other) will be retained. Note: If one of your site is taking backups daily and the other is doing monthly then the monthly one might suffer.

Another possible workaround that I have not explored : Use an automation service like IFTTT to monitor the folder for new files and copy or move them elsewhere.