[wp-hackers] WPMU Plugin management

[Donncha O Caoimh]

Yes, if you have disabled the plugins page, then a regular user, even 
the admin of a blog won't be able to activate a plugin.

Your own plugins page can check the sitemeta record to verify that a 
plugin has been allowed if a blog admin tries to activate it.

Donncha

Omry Yadan wrote:
> 
> is wpmu protected against users activating plugins through raw http
> requests?
> 
>