<font size="2"><font><font style="color:rgb(0, 0, 0);font-family:arial"><font><font face="arial, sans-serif"><span style="border-collapse:collapse">Bruce, it would be much easier to track and to respond on your messages if they are not sent separately</span></font></font></font></font></font><font size="2"><font><font><font><font face="arial, sans-serif"><font face="arial"><span style="border-collapse:collapse">. "Where is the line?" and "Sorry, Otto, you just don't get it". Please feel free to combine them into one. When responding try to use the same system.</span></font></font></font></font></font></font><div>
<font size="2"><font><span class="Apple-style-span" style="border-collapse: collapse;"><br></span></font></font></div><div><font size="2"><font><span class="Apple-style-span" style="border-collapse: collapse;">Cheers,<br clear="all">
</span>
</font></font></div><div><div><div><font style="border-collapse: collapse;">Emil</font></div><div><font style="border-collapse: collapse;"><br></font></div><div><font>----</font></div><div><font face="arial, helvetica, sans-serif"><strong>Emil Uzelac</strong> | ThemeID | T: 224-444-0006 | Twitter: @EmilUzelac | E: <a href="mailto:emil@themeid.com" target="_blank">emil@themeid.com</a> | <a href="http://themeid.com/" target="_blank">http://themeid.com</a></font></div>
<div><font color="#999999" face="arial, helvetica, sans-serif">Make everything as simple as possible, but not simpler. - Albert Einstein</font></div><br>
<br><br><div class="gmail_quote">On Sat, Jun 25, 2011 at 8:57 PM, Bruce Wampler <span dir="ltr"><<a href="mailto:brucewampler@gmail.com" target="_blank">brucewampler@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
I've read some comments that well implemented shared hosting sites don't have a problem with file ownership, which seems to be at the heart of the fopen issue.<br>
<br>
So, out of curiosity, why is it OK for the standard WP media library loader to upload files and have them owned by apache and not the user. Why doesn't it insist on using FTP as necessary? Seriously, why not?<br>
<br>
Why should themes be held to a higher standard than a fundamental part of WP - the media library?<br>
<br>
And in the big picture of the WP world, why have security issues taken over theme submission, when there are no controls whatsoever for plugins? The simple answer is that you have to start somewhere, but why are theme authors bearing the brunt of the issue? Why do I have to spend hours and hours of my (volunteer) time to understand the confusing WP file library, and then rewriting hundreds of lined of perfectly good code that uses fopen handles in creative ways (like to easily switch between file output and "echo" output with the same code), when many of the most popular plugins are subject to absolutely no reviews or standards whatsoever. If security is such an issue, then I suggest at least a little energy be diverted to getting control of plugins.<br>
<br>
-- <br>
-----------<br>
Bruce Wampler, Ph.D.<br>
<br>
Software developer<br>
Creator of first spelling checker for a PC<br>
Creator of Grammatik(tm), first true grammar checker<br>
e-mail: bw at <a href="http://brucewampler.com" target="_blank">brucewampler.com</a><br>
blog: <a href="http://brucewampler.wordpress.com" target="_blank">brucewampler.wordpress.com</a><br>
<br>
______________________________<u></u>_________________<br>
theme-reviewers mailing list<br>
<a href="mailto:theme-reviewers@lists.wordpress.org" target="_blank">theme-reviewers@lists.<u></u>wordpress.org</a><br>
<a href="http://lists.wordpress.org/mailman/listinfo/theme-reviewers" target="_blank">http://lists.wordpress.org/<u></u>mailman/listinfo/theme-<u></u>reviewers</a><br>
</blockquote></div><br></div>
</div>