• Resolved andre1dev

    (@andre1dev)


    During the 2.0 activation process, wordpress admin login details are requested.

    You say that this information is not saved, that is, it is used for something executed only at the moment. Keeping this data in the database, but encoded, does not count, because somewhere there is the key to decode it or else there is no point in keeping the data.

    I’ve gone through hundreds of plugins that can turn wordpress upside down, but none asked me for access data that way. Anyone should know that you should never enter login data outside the wordpress environment.

    The question is, what is this information used for?

Viewing 4 replies - 1 through 4 (of 4 total)
  • Plugin Support Nebu John – WPMU DEV Support

    (@wpmudevsupport14)

    Hi @andre1dev,

    Trust you are doing good and thank you for reaching out to us.

    The reason we request WordPress admin access is to install the WPMU DEV Dashboard plugin, which is necessary to connect your website to our Hub. If you’re not comfortable providing these credentials, you can use the alternative method of manually installing the plugin, which doesn’t require providing admin access.

    Please find more details here: https://wpmudev.com/docs/getting-started/installing-the-wpmu-dev-dashboard-plugin/

    Please feel free to get back to us if you need any further clarification, we are happy to assist.

    Kind Regards,
    Nebu John

    Thread Starter andre1dev

    (@andre1dev)

    I know this is part of the activation process, the question is what is done with this data?

    As it is said that the data is not saved, this information is only available once and only at that moment.

    Is an access rule created in wordpress? Is something created on the wordpress side and sent back to WPMU?

    If, for example, you generate a token to serve as a link between the two sides, instead of asking for a login, it would be better to ask to inform the token.

    Again, if you kept this login data somewhere, despite disagreeing, I can see utilities, but since you say that they don’t record, what is done at the time of activation?

    Plugin Support Laura – WPMU DEV Support

    (@wpmudev-support8)

    Hi @andre1dev

    Thank you for response!

    There is no access rule created anywhere, the access data is not stored too. What happens is exactly this:

    – an API script on our end sends a series of HTTP requests to your site, just like it was about to login to it
    – and installs the WPMU DEV Dashboard plugin there
    – which it activates on site
    – and then API call is made to pass the API key to the enabled plugin (which sets connection with the Hub)
    – the end

    That’s about the credentials that you are asked for. Nothing else and more is done about it.

    After that – yes, there is a “token” (or an API key) in use which “connects” the dashboard plugin (which in turn allows API access/communication) to the HUb but that token is in no way related to the access credentials (it’s not based on those).

    —-

    As my colleague explained also – this is not a required method. It is something we already use successfully for years for Pro plugins, for thousands of users and it’s just to make things simpler.

    But you can instead simply download the WPMU DEV Dashboard plugin, install it manually on site and activate and then connect it to the Hub. Note that it will require you to login with login and password but those would not be your site’s login and password but your WPMU DEV free account credentials. In such case no admin login credentials are required at all.

    Kind regards,
    Adam

    Thread Starter andre1dev

    (@andre1dev)

    When I updated to 2.0, in the activation process I landed on this page to provide login data (I don’t remember seeing that there was another way to proceed), which made me rollback to the previous version. But since there is this alternative, even if it’s a more manual job, I’ll take a look again. Thanks.

Viewing 4 replies - 1 through 4 (of 4 total)

The topic ‘WordPress admin login details requested’ is closed to new replies.