Viewing 4 replies - 1 through 4 (of 4 total)
  • If you pay for it, the credit disappears. It’s worth paying for!

    Moderator Jan Dembowski

    (@jdembowski)

    Forum Moderator and Brute Squad

    There’s a credit line?

    *Installs plugin on test installation, configures plugin on installation, verifies link*

    That plugin posts a link to the plugin author’s site like so.

    http://www.oneall.com/services/single-sign-on/?utm_source=XXXXXXXXX&utm_medium=banner&utm_campaign=branding

    And that does violate the plugin guidelines.

    10. The plugin must not embed external links on the public site (like a “powered by” link) without explicitly asking the user’s permission. Any such options in the plugin must default to NOT show the link.

    http://wordpress.org/plugins/about/guidelines/

    You can report that plugin to plugins [at] wordpress dot org.

    The plugin also adds

    <script type='text/javascript' src='http://test-dembowski.api.oneall.com/socialize/library.js'></script>

    Which I don’t get if it’s for logins.

    Moderator Samuel Wood (Otto)

    (@otto42)

    WordPress.org Admin

    This is actually okay because it’s providing a service. Those login buttons actually go to their site, do the authentication, and pass back credentials and other information to the site running the plugin, thus allowing the authentication.

    Social network authorization is tricky, and rolling into a plugin is trickier and error prone. Providing it as a third-party service is acceptable, and the credit link comes from their javascript that is adding those buttons. People can decide to use it or not, as they see fit.

    Also, having the credit line there is better for users, since it informs them that they’re giving their credentials to a third party in order to do authentication.

    Moderator Jan Dembowski

    (@jdembowski)

    Forum Moderator and Brute Squad

    Quick update before my train hits the tunnel: Actually I just heard from someone that that really is software as a service (which sometimes gives me headaches) and that link essentially lets the user logging know that the login is handled by a third party.

    That third party notification is important and in this case that link is acceptable and doesn’t violate the plugin guidelines.

    Edit: Which Otto got to before I did. 😉

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘ignore’ is closed to new replies.