[wp-trac] [WordPress Trac] #26273: Deactivated plugins and themes should not execute

[WordPress Trac]

#26273: Deactivated plugins and themes should not execute
----------------------------+----------------------
 Reporter:  kirrus          |       Owner:  (none)
     Type:  enhancement     |      Status:  closed
 Priority:  normal          |   Milestone:
Component:  Administration  |     Version:
 Severity:  normal          |  Resolution:  wontfix
 Keywords:                  |     Focuses:
----------------------------+----------------------

Comment (by KestutisIT):

 Replying to [comment:23 Ipstenu]:
 > Again, please keep multisite in mind. If I deactivate a plugin on one
 site in the network, I would like it to keep working for the others :)
 This is also true if I global deactivate a plugin. I may still want to
 activate it on individual sites after, and assuming that I don't can open
 up a rat's nest.
 Then one more check probably needed that would do the check:
 "if plugin is nor network activated, nor in any of sub-sites
 individually", then put this .htaccess file /ngix requirement.
 As we in SolidMVC micro-framework upgradings already went over those
 checkings, it is possible with some extra lines of code check that. And
 remove .htaccess in case plugin is .network-activated, or .network-
 deactivated.

 Of course, there could be another way to solve it - offer PHP.net team to
 add to PHP 8.0 a feature to mark folder web-inaccessible (similar to chmod
 rights). Or even we can be changing chmod rights with remove of 'execute'
 permission from user-level. Meaning then the files would not allow
 execution. Maybe chmod permission changing can be even easier solution,
 but I'm not sure if this is supported by chmod.

 As same as PHP has now file directives for STRICT, it could also have
 FOLDER directive for web-accessible or not. But until PHP 8, I'd suggest
 to go with .htaccess / ngix directive recommendation, or maybe with CHMOD
 exec ON/OFF setter.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/26273#comment:24>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform