[wp-trac] [WordPress Trac] #33724: Save FTP Details in Database
WordPress Trac
noreply at wordpress.org
Fri Sep 4 10:29:39 UTC 2015
#33724: Save FTP Details in Database
-----------------------------+-----------------------------
Reporter: atomicjack | Owner:
Type: enhancement | Status: new
Priority: normal | Milestone: Awaiting Review
Component: Upgrade/Install | Version: trunk
Severity: normal | Keywords:
Focuses: administration |
-----------------------------+-----------------------------
Currently, FTP details are automatically saved in wp-config, in what is
essentially plain text.
This is both insecure and inefficient.
Insecure: plain text passwords. Need I say more?
Inefficient: If file permissions are correct, the user is always asked to
re-enter the FTP details, as they cannot be written to wp-config.php
Solution? Hash the FTP password, save the details to the database.
It secures the password - and, there are no more file permission issues in
regards to FTP issues.
--
Ticket URL: <https://core.trac.wordpress.org/ticket/33724>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform
More information about the wp-trac
mailing list