I want to create a CMS, and when the user logs in to update their photos or post news messages etc. they get a news feed from my server that lets them know if there's an update or upgrade for their CMS. Client needs will vary so I'll have to alter the CMS for each client, but my question is what is the best way to update their version of the CMS after it's deployed and possibly not on my server.
Lets say there's a security issue with the login system, I want to have a way of when they log in next time to update their site, get a notification of a necessary update. This update would then create an entirely new php login script or update the existing one.
I thought about possibly transporting the update by XML, by say a news feed of some sort, then parse the XML file into fwrite to write the new script to their file directory.
I think including files from remote servers is possible, but a feature that I think for security reasons most hosting companies disable. It is possible though to have a php script that parses XML data then writes the data to a new php file (I think), though I'm not sure if this is the best method.
Here's a test script I wrote, it uses php to fwrite a new file and the contents are actually a php script, so if you run the script it creates a script that multiplies 3x3.
<?php
$file = "multiply.php";
$handle = fopen($file, 'w') or die("error dude");
$message = "<?php\n";
$message .= "\$result = (3 * 3);\n";
$message .= "echo \$result;\n";
$message .= "?>";
fwrite($handle, $message);
fclose($handle);
echo "File ".$file." successfully created! View it <a href=\"".$file."\">here</a>.";
?>
Does anyone have any thoughts on this issue of remote updates to external applications that you've previously created for clients?