• I’am building up a page with weaver and love all the custom possibillities.

    Tonight I got a message that I need to Provide FTP File Access Credentials to weaver with a small security risk -I do not like the sound of that.

    what do you think?

    Any experience with weaver -good or bad?

Viewing 2 replies - 1 through 2 (of 2 total)
  • Tonight I got a message that I need to Provide FTP File Access Credentials

    If you mean an email message, then No. Nope. Uh, uh. Unless “weaver” is a family member, tell ’em to back the truck up…

    Now on the other hand, if you are talking about Dreamweaver, and all it’s doing is asking for your credentials so that you may us it as an ftp client, that could be a different story.

    What exactly is the “weaver” program that you are using? Lets have a look at that rascal! ??

    I believe the OP is referring to the Weaver theme, and the FTP credentials being referred to are what the WP_Filesystem requires. See this article by Otto: https://ottopress.com/2011/tutorial-using-the-wp_filesystem/.

    Basically themes released on the www.ads-software.com/extend/themes repository are not allowed to use file operations. If a theme wants to write generated options to a CSS file, the recommended way is to not do it at all. In spite of this if the author believes there is value in saving the CSS, he/she has to use the filesystem. The drawback is that this method asks for FTP credentials.

    This is a perfectly safe and acceptable way and I don’t believe there is any security risk. Of course, it is a major pain when you are chopping and changing things if you have to keep reentering your credentials, but apart from that there is no harm done.

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘message from weaver -what to think of it?’ is closed to new replies.