Support » Plugin: SSH SFTP Updater Support » SSH Info requested repeatedly

Viewing 6 replies - 1 through 6 (of 6 total)
  • Plugin Author TerraFrost

    (@terrafrost)

    Does it re-prompt you for credentials when doing things via FTP? I imagine it would – that it’s probably logging in via FTP / SFTP and actively deleting the files associated with that plugin / theme. If that’s the case then that’s just the way WordPress is designed. It’d have to ask you for your credentials each time..

    Justin

    (@justinchriscook)

    I’m not positive I understand your question, but if you are asking if when I delete a file via SFTP with a tool like FileZilla am I prompted to login, I suppose the answer is yes, once, then I am able to delete anything I want until I close the connection.

    What I don’t understand is why the plugin (since it has clearly saved all my SSH info) is showing me the screen to enter all my info again when I perform an action that uses the plugin (like deleting a theme). It seems like it’s just confirming my info every time, which is unnecessary.

    Plugin Author TerraFrost

    (@terrafrost)

    I’m not positive I understand your question, but if you are asking if when I delete a file via SFTP with a tool like FileZilla am I prompted to login, I suppose the answer is yes, once, then I am able to delete anything I want until I close the connection.

    I mean like with other built-in WordPress methods. Like if you try to install a plugin via FTP, if you can, I imagine it’d behave similarly.

    What I don’t understand is why the plugin (since it has clearly saved all my SSH info) is showing me the screen to enter all my info again when I perform an action that uses the plugin (like deleting a theme). It seems like it’s just confirming my info every time, which is unnecessary.

    That’s probably your browser that’s saving the info – not the plugin. The plugin doesn’t save your info anywhere since doing so could constitute a vulnerability. ie. what if WordPress had an SQL injection vulnerability. Just SQL inject a SELECT and you get the SFTP credentials from the DB and then that SQL injection is the least of your concerns.

    Justin

    (@justinchriscook)

    I would hope it doesn’t save them to the DB. However It could save/load them from a PHP config file just like WordPress does with the DB connection info.

    Justin

    (@justinchriscook)

    Plugin Author TerraFrost

    (@terrafrost)

    You should still be able to do that with this plugin. FTP_HOST, FTP_USER, FTP_PASS, FTP_PRIKEY are the constants you should be using.

Viewing 6 replies - 1 through 6 (of 6 total)
  • The topic ‘SSH Info requested repeatedly’ is closed to new replies.