[wp-trac] [WordPress Trac] #29603: Change how themes include plugins

[WordPress Trac]

#29603: Change how themes include plugins
-----------------------------+-----------------------------
 Reporter:  dmchale          |      Owner:
     Type:  feature request  |     Status:  new
 Priority:  normal           |  Milestone:  Awaiting Review
Component:  Themes           |    Version:  trunk
 Severity:  normal           |   Keywords:
  Focuses:  administration   |
-----------------------------+-----------------------------
 Many theme authors choose to include plugins directly, "baked in" to the
 theme itself and site admins rely on theme updates to update those
 plugins. With scenarios like the Revolution Slider exploit, I think many
 of us agree that this is a less than ideal situation.

 I propose one of two methods to help "fix" the issue and put more control
 of what plugins run into the hands of the site owners

 1) Create a means where themes can include plugins within their own
 structure. Perhaps  a /plugins directory within the theme folder would be
 enough (with the ability for theme authors to override that location if
 they wish). Allow plugins included this way to be seen on the Plugins
 Dashboard so that site owners may, at the VERY least, update the included
 plugins instead of relying on the theme authors. Possibly allow/disallow
 deactivation of these plugins - though I would lean towards allowing
 deactivation.

 2) Build in functionality to Core which gives theme authors the same
 functionality as http://tgmpluginactivation.com/ - allowing a theme author
 to selectively recommend/force plugins to be installed which are required
 by the theme. This still lets an author require the functionality, but
 gives the site owner control over these plugins along with all "normal"
 plugins that the site owner chooses to install.

 This should become the new "normal". Let's stop baked-in plugins.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/29603>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform