Comments on: Disabling the Plugin/Theme editor 3.0 http://wpmututorials.com/plugins/disabling-the-plugintheme-editor-3-0/ WordPress multisite how to - making sense of the network feature from what was wordpress mu Thu, 26 Jan 2012 22:51:00 +0000 hourly 1 http://wordpress.org/?v=3.3 By: Richard Matthews http://wpmututorials.com/plugins/disabling-the-plugintheme-editor-3-0/#comment-9813 Richard Matthews Mon, 05 Jul 2010 02:45:45 +0000 http://wpmututorials.com/?p=362#comment-9813 Hey Guys, I've got a question about security and usability for my WP3 Multi-Site install. I'm running a pretty well moderated community site, with the ability for users to keep 'Journals' - our custom name for blogs. But WPMS defaults all new users as Admins of any blogs they create. What would be ideal for us is if they could default to simply Editors for their own blogs. Do you know if this is possible? Hey Guys,

I’ve got a question about security and usability for my WP3 Multi-Site install.

I’m running a pretty well moderated community site, with the ability for users to keep ‘Journals’ – our custom name for blogs. But WPMS defaults all new users as Admins of any blogs they create. What would be ideal for us is if they could default to simply Editors for their own blogs.

Do you know if this is possible?

]]> By: Deepanshu Goel http://wpmututorials.com/plugins/disabling-the-plugintheme-editor-3-0/#comment-9645 Deepanshu Goel Thu, 24 Jun 2010 03:34:47 +0000 http://wpmututorials.com/?p=362#comment-9645 Thanks a lot. one simple line in wp-config.php does make a lot sense in view of security. Thanks a lot.

one simple line in wp-config.php does make a lot sense in view of security.

]]> By: andrea http://wpmututorials.com/plugins/disabling-the-plugintheme-editor-3-0/#comment-9129 andrea Wed, 16 Jun 2010 19:08:51 +0000 http://wpmututorials.com/?p=362#comment-9129 Remove the temptation to try, and even with permissions - what if you miss some? Remove the temptation to try, and even with permissions – what if you miss some?

]]> By: Ryan http://wpmututorials.com/plugins/disabling-the-plugintheme-editor-3-0/#comment-9123 Ryan Wed, 16 Jun 2010 17:29:11 +0000 http://wpmututorials.com/?p=362#comment-9123 I assumed file permissions would be the standard way to work around this. Removing the editor link does make things a little smoother looking in the backend though I spose. I assumed file permissions would be the standard way to work around this.

Removing the editor link does make things a little smoother looking in the backend though I spose.

]]> By: mercime http://wpmututorials.com/plugins/disabling-the-plugintheme-editor-3-0/#comment-8816 mercime Sun, 13 Jun 2010 23:08:24 +0000 http://wpmututorials.com/?p=362#comment-8816 Ron, thank you for this plugin. I already had an enable plugin/theme editor in mu-plugins when I upgraded dev install to WP 3.0 trunk and saw two links to each editor :-) Agreed with you 100% that theme& plugin editors should not be enabled even for Site/Super Admins in production/live installs. Thanks again. Ron, thank you for this plugin. I already had an enable plugin/theme editor in mu-plugins when I upgraded dev install to WP 3.0 trunk and saw two links to each editor :-) Agreed with you 100% that theme& plugin editors should not be enabled even for Site/Super Admins in production/live installs.

Thanks again.

]]> By: Donald http://wpmututorials.com/plugins/disabling-the-plugintheme-editor-3-0/#comment-8096 Donald Mon, 03 May 2010 08:12:18 +0000 http://wpmututorials.com/?p=362#comment-8096 Great plugin! Almost exactly what I wanted. Added $cap == 'delete_plugins' || $cap == 'activate_plugins' to the function to disable activation or deactivation of all plugins. This in addition to the "disable plugin updates" plugin works perfect, thanks! Great plugin! Almost exactly what I wanted. Added

$cap == ‘delete_plugins’ || $cap == ‘activate_plugins’

to the function to disable activation or deactivation of all plugins.

This in addition to the “disable plugin updates” plugin works perfect, thanks!

]]> By: Ron http://wpmututorials.com/plugins/disabling-the-plugintheme-editor-3-0/#comment-8035 Ron Sun, 18 Apr 2010 02:30:13 +0000 http://wpmututorials.com/?p=362#comment-8035 The plugin goes in the wp-content/mu-plugins folder. In a new 3.0 install, you need to create the folder. The plugin goes in the wp-content/mu-plugins folder. In a new 3.0 install, you need to create the folder.

]]> By: Ipstenu http://wpmututorials.com/plugins/disabling-the-plugintheme-editor-3-0/#comment-8022 Ipstenu Wed, 14 Apr 2010 17:01:42 +0000 http://wpmututorials.com/?p=362#comment-8022 I put this in my /plugins folder on my MultiSite blog and went to activate it only ... it's not there. So I remembered that dropins for Multi Site go in the wp-content folder, not plugins. I went and put it there and still nothing. I even went and checked that I (as super-admin) could still edit themes and plugins and I can. This is 3.0-Beta with the nightly build from the 13th. I put this in my /plugins folder on my MultiSite blog and went to activate it only … it’s not there. So I remembered that dropins for Multi Site go in the wp-content folder, not plugins. I went and put it there and still nothing. I even went and checked that I (as super-admin) could still edit themes and plugins and I can.

This is 3.0-Beta with the nightly build from the 13th.

]]> By: Ron http://wpmututorials.com/plugins/disabling-the-plugintheme-editor-3-0/#comment-8018 Ron Wed, 14 Apr 2010 05:04:12 +0000 http://wpmututorials.com/?p=362#comment-8018 If someone hacks their way onto the super admin list, then they have access to the theme/plugin files. In the case of the theme editor, it defaults to the active theme on the current blog. The rest of the hack script would be pretty easy writing. If someone hacks their way onto the super admin list, then they have access to the theme/plugin files. In the case of the theme editor, it defaults to the active theme on the current blog. The rest of the hack script would be pretty easy writing.

]]> By: Ovidiu http://wpmututorials.com/plugins/disabling-the-plugintheme-editor-3-0/#comment-8011 Ovidiu Mon, 12 Apr 2010 23:39:12 +0000 http://wpmututorials.com/?p=362#comment-8011 dumb question, but why disable the editors for the Super Admin? Or am I simply confused by the new terms? Isn't the Super Admin = the global admin, as opposed to a blog-admin (aka a user that signs up for a blog and becomes its admin?) dumb question, but why disable the editors for the Super Admin? Or am I simply confused by the new terms? Isn’t the Super Admin = the global admin, as opposed to a blog-admin (aka a user that signs up for a blog and becomes its admin?)

]]>