excessive permissions on plugins

  • simonm3

    (@simonm3)


    1 year, 7 months ago

    I have installed wordpress but when I try to change the email address it says “pending” and I have not received any email to confirm. After some searching I find wordpress does not actually have email sending built in so I have to install “wp mail smtp” plugin in order to change the email address. This plugin requests permissions to delete all my gmails which is excessive.

    I also installed updraftplus to backup wordpress. However this seems to require permission to access and delete all my files on googledrive. This also seems excessive.

    Why do these plugins require this? I am not willing to give those permissions so for now not able to use wordpress.

Viewing 3 replies - 1 through 3 (of 3 total)
  • Moderator Steven Stern (sterndata)

    (@sterndata)

    Volunteer Forum Moderator

    1 year, 7 months ago

    No, the email on an admin address change is just flaky. It’s best to cancel that request then use PHPMYADMIN, from your hosting control panel, to locate the row “admin_email” in the wp_options table and edit the value to your new email.

    WP mail smtp is probably not necessary. If you have questions about how it works, I recommend asking at https://wordpress.org/support/plugin/wp-mail-smtp/#new-post so the plugin’s developers and support community can help you with this.

    If you tell updraft to save files on your gdrive, then it needs permissions. I recommend asking at https://wordpress.org/support/plugin/updraftplus/#new-post so the plugin’s developers and support community can help you with this.

    Thread Starter simonm3

    (@simonm3)

    1 year, 7 months ago

    Thanks. What is the hosting control panel? I am using bitnami/wordpress docker compose. Do I need to add a container for phpmyadmin or is it part of wordpress?

    Re the backup plugin I found alternative wpvivid which only asks for access to files it created. This seems much safer and more sensible than allowing access to delete all files!

    Moderator Steven Stern (sterndata)

    (@sterndata)

    Volunteer Forum Moderator

    1 year, 7 months ago

    If you’re on your own vps, you should install phpmyadmin. I have no idea how to do that in a docker container but you might ask the bitnami folks.

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘excessive permissions on plugins’ is closed to new replies.