Answers.Body: <p><strong>Disabling security notifications hides the notice from your users, but it won't hide your sites from attackers.</strong> Turning off the warning supports a scenario where those sites are at risk longer.</p>
  
  <p>Here's how we handle it for our hosting clients -</p>
  
  <ul>
  <li>Create a recurring item in your calendar for the <a href="http://civicrm.org/security">CiviCRM security release dates</a>, first and third Wednesday each month. (We do the same for Drupal security releases.)</li>
  <li>Be subscribed to the <a href="https://civicrm.org/advisory/subscribe">CiviCRM Security Advisories announce list</a>.</li>
  <li>If a release occurs on that date, run the upgrade through your testing, then deploy/apply to production.</li>
  </ul>
  
  <p>Since CiviCRM stores personal data, I believe every organisation using CiviCRM has a responsibility to ensure there are processes in place to ensure security updates are applied promptly as part of a wider programme to protect your customers and their contacts.</p>
  
Answers.ContentLicense: CC BY-SA 3.0
Answers.CreationDate: 2015-10-15T11:58:36.300Z
Answers.Text: If you're interested, [here's the Drush command](https://github.com/fuzionnz/fuzion-drush/blob/master/fuzion.drush.inc#L143) I used to update a couple dozen sites to 4.6.9 when it released this week. It takes seconds to run through each site, and you can use it to quickly and remotely update a network of sites. A simpler method is to use the `drush civicrm-upgrade` command which is built into CiviCRM, probably similar things exist for WP/Joomla.
Answers.UserDisplayName: Chris Burgess
Answers.ContentLicense: CC BY-SA 3.0
Answers.CreationDate: 2015-10-15T11:58:29.493Z
Answers.LastActivityDate: 2015-10-15T11:58:29.493Z
Answers.UserDisplayName: Chris Burgess
Answers.Body: <p>Marsh's answer is correct for Civi 4.6.  For versions 4.7+, go to <strong>Administer menu » Administration Console » System Status</strong> and press "Hide" next to the version check message.  You can choose to hide the message for a week, a month, or forever.</p>
  
  <p>Note that hiding a non-security update will NOT hide a security update, but hiding a security update will hide both.</p>
  
  <p>If you're looking for a way to hide upgrade messages from the command line, or when there's no update available, use an API command, something like this:</p>
  
  <pre><code>#Drupal or Backdrop
  drush cvapi StatusPreference.create name="checkVersion" ignore_severity=2
  #WordPress 
  wp civicrm api StatusPreference.create name="checkVersion" ignore_severity=2
  </code></pre>
  
  <p>Change the 2 to a 5 to hide security updates as well as non-security updates.</p>
  
Answers.ContentLicense: CC BY-SA 3.0
Answers.CreationDate: 2016-07-07T19:18:20.300Z
Answers.LastActivityDate: 2016-07-07T19:18:20.300Z
Answers.UserDisplayName: Jon G - Megaphone Tech
Answers.Body: <p>Whilst <strong>this may not be a good idea if you don't have infrastructure to keep on top of upgrades &amp; security issues</strong>, the setting can be found in:</p>
  
  <blockquote>
    <p><strong>Administer > System Settings > Misc</strong>.</p>
  </blockquote>
  
  <p>the notifications are set in the dababase in the civicrm_setting table (along with lots of other useful little settings :))</p>
  
  <p>From the "name" column, we can ascertain that:</p>
  
  <pre><code>global $civicrm_setting;
  // Disable new version messages
  $civicrm_setting['CiviCRM Preferences']['versionAlert'] = 0;
  // Disable Security Messages
  $civicrm_setting['CiviCRM Preferences']['securityUpdateAlert'] = 0;
  </code></pre>
  
  <p>will disable all of the notifications.</p>
  
  <p><strong>See Chris' answer - it's important to have the infrastructure to take care of upgrades!</strong></p>
  
Answers.ContentLicense: CC BY-SA 3.0
Answers.CreationDate: 2016-07-07T19:10:59.273Z
Answers.Text: This answer is for Civi 4.6; these options are removed in Civi 4.7.  My answer is for 4.7+ below.
Answers.UserDisplayName: Jon G - Megaphone Tech
Answers.ContentLicense: CC BY-SA 3.0
Answers.CreationDate: 2015-10-15T10:20:03.667Z
Answers.LastActivityDate: 2017-03-29T02:49:50.960Z
Answers.LastEditDate: 2017-03-29T02:49:50.960Z
Answers.UserDisplayName: Marsh
Answers.Body: <p>You can disable this from:
   CiviCRM > Administer > System Settings > Undelete, Logging, ReCAPTCHA (on version 4.3.x )
  and from 
   CiviCRM > Administer > System Settings > Misc (Undelete, PDFs, Limits ....) (on version 4.4.x)</p>
  
Answers.ContentLicense: CC BY-SA 3.0
Answers.CreationDate: 2016-09-09T07:08:27.303Z
Answers.LastActivityDate: 2016-09-09T07:08:27.303Z
Answers.UserDisplayName: jins mathew
Body: <p>As we keep an eye on these upgrade for clients, the last thing we need is for them to worry about it while we check out their customisations for compatability etc.</p>
  
  <p>How to get rid of them?</p>
  
Tags: <security><settings><civicrm.settings.php>
Title: How do I stop the new "Security Notifications" that civi pops up for upgrades
ThreadText: # How do I stop the new "Security Notifications" that civi pops up for upgrades
  
  (Asked by: username_0 on 2015-10-15)
  
  As we keep an eye on these upgrade for clients, the last thing we need is for them to worry about it while we check out their customisations for compatability etc.
  
  How to get rid of them?
  
  **Tags:** security, settings, civicrm.settings.php
  
  
  ---
  
  ## 4 answers
  
  ### Answer by username_1 on 2015-10-15. Score: 8
  
  **Disabling security notifications hides the notice from your users, but it won't hide your sites from attackers.** Turning off the warning supports a scenario where those sites are at risk longer.
  
  Here's how we handle it for our hosting clients -
  
  * Create a recurring item in your calendar for the [CiviCRM security release dates](http://civicrm.org/security), first and third Wednesday each month. (We do the same for Drupal security releases.)
  * Be subscribed to the [CiviCRM Security Advisories announce list](https://civicrm.org/advisory/subscribe).
  * If a release occurs on that date, run the upgrade through your testing, then deploy/apply to production.
  
  Since CiviCRM stores personal data, I believe every organisation using CiviCRM has a responsibility to ensure there are processes in place to ensure security updates are applied promptly as part of a wider programme to protect your customers and their contacts.
  
  > **Comments:**
  > **username_1**: If you're interested, [here's the Drush command](https://github.com/fuzionnz/fuzion-drush/blob/master/fuzion.drush.inc#L143) I used to update a couple dozen sites to 4.6.9 when it released this week. It takes seconds to run through each site, and you can use it to quickly and remotely update a network of sites. A simpler method is to use the `drush civicrm-upgrade` command which is built into CiviCRM, probably similar things exist for WP/Joomla.  
  
  ---
  
  ### Answer by username_2 on 2016-07-07. Score: 3
  
  username_0's answer is correct for Civi 4.6.  For versions 4.7+, go to Administer menu » Administration Console » System Status and press "Hide" next to the version check message.  You can choose to hide the message for a week, a month, or forever.
  Note that hiding a non-security update will NOT hide a security update, but hiding a security update will hide both.
  If you're looking for a way to hide upgrade messages from the command line, or when there's no update available, use an API command, something like this:
  #Drupal or Backdrop
  drush cvapi StatusPreference.create name="checkVersion" ignore_severity=2
  #WordPress 
  wp civicrm api StatusPreference.create name="checkVersion" ignore_severity=2
  
  Change the 2 to a 5 to hide security updates as well as non-security updates.
  
  
  ---
  
  ### Answer by username_0 on 2015-10-15. Score: 2
  
  Whilst this may not be a good idea if you don't have infrastructure to keep on top of upgrades & security issues, the setting can be found in:
  
  Administer > System Settings > Misc.
  
  the notifications are set in the dababase in the civicrm_setting table (along with lots of other useful little settings :))
  From the "name" column, we can ascertain that:
  global $civicrm_setting;
  // Disable new version messages
  $civicrm_setting['CiviCRM Preferences']['versionAlert'] = 0;
  // Disable Security Messages
  $civicrm_setting['CiviCRM Preferences']['securityUpdateAlert'] = 0;
  
  will disable all of the notifications.
  See Chris' answer - it's important to have the infrastructure to take care of upgrades!
  
  > **Comments:**
  > **username_2**: This answer is for Civi 4.6; these options are removed in Civi 4.7.  My answer is for 4.7+ below.  
  
  ---
  
  ### Answer by username_3 on 2016-09-09. Score: 0
  
  You can disable this from:
  CiviCRM > Administer > System Settings > Undelete, Logging, ReCAPTCHA (on version 4.3.x )
  and from
  CiviCRM > Administer > System Settings > Misc (Undelete, PDFs, Limits ....) (on version 4.4.x)
  
  
  ---
  
  