[wp-trac] [WordPress Trac] #35517: Work around PHP7 php-ssh2 breakage

[WordPress Trac]

#35517: Work around PHP7 php-ssh2 breakage
----------------------------+------------------------------
 Reporter:  dougal          |       Owner:
     Type:  defect (bug)    |      Status:  new
 Priority:  normal          |   Milestone:  Awaiting Review
Component:  Filesystem API  |     Version:
 Severity:  normal          |  Resolution:
 Keywords:  has-patch       |     Focuses:  administration
----------------------------+------------------------------

Comment (by jobst):

 (including @dd32)
 I really do not understand that the php-ssh2 extension is not used more
 often!

 When you use the direct update FS_METHOD you have to open the entire file
 tree to the user of the web-server as writeable, otherwise the
 FS_METHOD=direct does not work.

 The FS_METHOD=ssh2 has made me sleep so much better as I can have two
 users within the entire tree of a Wordpress installation, where the OWNER
 is the only one being able to write the entire tree and the web-server
 user can only write a very limited range (e.g. ./wp-
 content/[upload|cache|upgrade|wf*] plus some css directories).

 The php-ssh2 extension allows me to specify the OWNER of the tree as the
 updater and thus I have no problems updating. It's so simple to stop a
 malicious script to overwrite index.php using the php-ssh2 extension.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/35517#comment:14>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform