How to securely edit a working WP site on hosting?

Question

WordPress

Hello.
I would like to know what do you think about this algorithm? Add or remove unnecessary, please.

1) The customer needs to make changes on the site (add a new section, gallery, change the current slider to a new one, etc.)

2) Get a name, password, FTP access

3) Copy the entire site (everything that is in the folder with the site: wp-content , wp-condig.php, etc.) to your PC via FileZilla, do not touch one copy (backup), upload one locally to OpenServer (since there is no index.html, only php, so you need OpenServer and WP)

4) Edit the site in in accordance with the wishes of the customer through the code editor (we connect new libraries, add sliders, etc.)

5) Everything is done, it is necessary to transfer the modified files to the working site, preferably during non-working hours (although how to do this if, for example, different time zones or an online store is round-the-clock), in order to avoid errors (the client leaves a request, then bam and 404, the client left) ,
and if they are, then so that there is time to fix them

6) If everything is ok, then the job is done.

Answer 1

I'll squeeze a couple of tips into your todo list.
After the 4th step, when you have edited the site and need to show the customer:
- do not transfer the site until the money is received
- if you need to show the client, you can either use openserver to open access to the site and send him a link, or even easier - use ngrok.
https://ngrok.com/
So the client will be able to look at the site for the fact that the site has changed, then you receive your money if you have not received it by this time and only then transfer it.

Everything is done, you need to transfer the modified files to the working site, preferably during off-hours (although how to do this if, for example, different time zones or the online store is round-the-clock), in order to avoid errors (the client leaves a request, then bam and 404, the client left),

Here you can do it in different ways:
a) if the hosting allows you to do it, you can upload the site files to a new root directory, update the database and change the directory for the domain. And delete the old directory.
b) use a file manager (for example, total commander || double comander) to compare directories. Well, then synchronize them (add the missing files and folders via FTP to the working site) And then update the database. Usually, updating the database takes a couple of minutes.
There are many more ways to do this...