[wp-trac] [WordPress Trac] #33724: Save FTP Details in Database

WordPress Trac noreply at wordpress.org
Fri Sep 4 10:29:39 UTC 2015


#33724: Save FTP Details in Database
-----------------------------+-----------------------------
 Reporter:  atomicjack       |      Owner:
     Type:  enhancement      |     Status:  new
 Priority:  normal           |  Milestone:  Awaiting Review
Component:  Upgrade/Install  |    Version:  trunk
 Severity:  normal           |   Keywords:
  Focuses:  administration   |
-----------------------------+-----------------------------
 Currently, FTP details are automatically saved in wp-config, in what is
 essentially plain text.

 This is both insecure and inefficient.

 Insecure: plain text passwords. Need I say more?

 Inefficient: If file permissions are correct, the user is always asked to
 re-enter the FTP details, as they cannot be written to wp-config.php

 Solution? Hash the FTP password, save the details to the database.

 It secures the password - and, there are no more file permission issues in
 regards to FTP  issues.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/33724>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list