[wp-trac] [WordPress Trac] #32101: Ability to mark plugin as unmanaged

WordPress Trac noreply at wordpress.org
Fri Jul 13 21:57:28 UTC 2018


#32101: Ability to mark plugin as unmanaged
-------------------------------------+----------------------------
 Reporter:  damonganto               |       Owner:  DrewAPicture
     Type:  task (blessed)           |      Status:  assigned
 Priority:  normal                   |   Milestone:  WordPress.org
Component:  Plugins                  |     Version:  4.1.2
 Severity:  normal                   |  Resolution:
 Keywords:  has-patch needs-testing  |     Focuses:
-------------------------------------+----------------------------

Comment (by lev0):

 Has there been any progress on this? It's always been an issue. I've seen
 plenty of discussion and examples of preventing updates on themes &
 plugins, whether it's because they're private or frozen at a specific
 version, or whatever. All rely on the plugin (or another) being active.
 Unique names can be discovered, especially themes', thus be commandeered.
 I don't see why this is not deemed important.

 From the comments presented here, and examples in other package managers,
 it seems pretty sensible to implement a plugin's "private" status as an
 update namespace. Its absence would mean be an implicit WordPress.org
 value for backward compatibility of auto-updates; anything else means
 ''not'' WP.org. The namespace could serve as an install-unique (not
 universal-) key for attaching hooks to do 3rd party update checks, and
 archive fetching, so the rest of WordPress's update system is unchanged.
 If nothing attaches to those unique hooks, WordPress can warn the admin
 that they aren't receiving the updates they should. A reserved value like
 "none" could be disallowed for hooks so only manual updates are allowed
 for those, again warning the admin. The outcome would be passive
 protection of plugins, and sanctioned update integration.

 Surely you can find a header name that does not already exist in the
 WP.org repo.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/32101#comment:61>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list