Honour the DISALLOW_FILE_MODS setting

  • Resolved gerryhickman

    (@gerryhickman)


    6 years, 3 months ago

    WordPress Version 4.8.2
    Plugin ‘all-in-one-wp-migration’ Version 6.58

    In wp-config.php, you can set DISALLOW_FILE_MODS, which prevents making changes to the file system. WordPress core and most plugins honour this setting, but ‘all-in-one-wp-migration’ appears to ignore the setting?

    This is important for change control, e.g. where you only want changes to occur after careful testing in a lab environment.

    This setting also makes hacking via core code and plugins more difficult, as it can’t write to the file system.

Viewing 4 replies - 1 through 4 (of 4 total)
  • Plugin Author Yani

    (@yaniiliev)

    6 years, 3 months ago

    @gerryhickman

    What is expected of the plugin to do when DISALLOW_FILE_MODS is set?

    Thread Starter gerryhickman

    (@gerryhickman)

    6 years, 3 months ago

    When DISALLOW_FILE_MODS is set, the plugin should refuse to make any modifications to the WordPress site.

    Plugin Author Yani

    (@yaniiliev)

    6 years, 3 months ago

    @gerryhickman

    This is the description of the constant:

    This will block users being able to use the plugin and theme installation/update functionality from the WordPress admin area. Setting this constant also disables the Plugin and Theme editor (i.e. you don’t need to set DISALLOW_FILE_MODS and DISALLOW_FILE_EDIT, as on its own DISALLOW_FILE_MODS will have the same effect).

    What this constant does is to disable installation/update functionality of Plugins and Themes. It also disables the Plugin and Themes editor.

    A backup can contain all sort of data:
    1. Just Database
    2. Just media files
    3. Database and Media files
    4. Media files and themes
    5. … so on

    If you are looking to disabled file modifications, you should disable the import role which will prevent users from import any backups but at the same time will allow them to create, download, and delete backups.

    I haven’t seen this constant being used on hosting providers yet. Are you running your own hosting or could you tell me a bit more about your use case?

    romzbajalan

    (@romzbajalan)

    6 years, 2 months ago

    Hello! Yani

    All-In-One WP Migration,

    I have read discussion on wordpress that org.but i cannot see the answer ,I have downloaded this plugin and installled in multisites xampp, reinstalled many times, but every time after installing, i am never able to see the plugin show-up/display in my dashboard. every other plugin I download I am able to see in my dashboard except this one. Could you have an idea whats the reasons behind? Could this be a result of the new WordPress version?could you help me to fix this issue?or i have to do in multisites xampp?

    Thanks in advance,

    Romz from Philippines

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘Honour the DISALLOW_FILE_MODS setting’ is closed to new replies.