[wp-trac] [WordPress Trac] #32101: Ability to mark plugin as unmanaged
WordPress Trac
noreply at wordpress.org
Fri Jul 13 21:57:28 UTC 2018
#32101: Ability to mark plugin as unmanaged
-------------------------------------+----------------------------
Reporter: damonganto | Owner: DrewAPicture
Type: task (blessed) | Status: assigned
Priority: normal | Milestone: WordPress.org
Component: Plugins | Version: 4.1.2
Severity: normal | Resolution:
Keywords: has-patch needs-testing | Focuses:
-------------------------------------+----------------------------
Comment (by lev0):
Has there been any progress on this? It's always been an issue. I've seen
plenty of discussion and examples of preventing updates on themes &
plugins, whether it's because they're private or frozen at a specific
version, or whatever. All rely on the plugin (or another) being active.
Unique names can be discovered, especially themes', thus be commandeered.
I don't see why this is not deemed important.
From the comments presented here, and examples in other package managers,
it seems pretty sensible to implement a plugin's "private" status as an
update namespace. Its absence would mean be an implicit WordPress.org
value for backward compatibility of auto-updates; anything else means
''not'' WP.org. The namespace could serve as an install-unique (not
universal-) key for attaching hooks to do 3rd party update checks, and
archive fetching, so the rest of WordPress's update system is unchanged.
If nothing attaches to those unique hooks, WordPress can warn the admin
that they aren't receiving the updates they should. A reserved value like
"none" could be disallowed for hooks so only manual updates are allowed
for those, again warning the admin. The outcome would be passive
protection of plugins, and sanctioned update integration.
Surely you can find a header name that does not already exist in the
WP.org repo.
--
Ticket URL: <https://core.trac.wordpress.org/ticket/32101#comment:61>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform
More information about the wp-trac
mailing list