[wp-testers] Re: Is this possible....

2008-12-06 Thread DJ Allyn
Is there a reason you keep the inactive plugins your host includes with one-click or Fantastico? They are usually the first things I delete when I get them. For me, it is the Hello Dolly plugin I get every time I upgrade. I don't dislike it, I just don't use it, so I get rid of it so I don't

Re: [wp-testers] Re: Is this possible....

2008-12-06 Thread Chris Moody
Why be shown at all that an inactive plug in needs to be updated? I can see that you may want to know it has an update if your looking at the plugin screen itself, but if your writing a new post, do you really care right then that an inactive plugin has an update? Chris Chris Thomson wrote:

Re: [wp-testers] Re: Is this possible....

2008-12-06 Thread Patrick D.
Inactive plugins should be notified. If you have an inactive plugin that has had an exploit since you last used it and you activiate it again, you'd be at risk immediately until you went and updated. Just easier to keep it updated (even if inactive) or just delete it entirely. Patrick --- My name

Re: [wp-testers] Re: Is this possible....

2008-12-06 Thread Gaarai
As mentioned before, even inactive plugins can be a security risk. So, it stands to reason that the best way to keep your site safe when running plugins is by either a) removing plugins you no longer intend to use to remove the possible security risk or b) updating all plugins when they have

Re: [wp-testers] Re: Is this possible....

2008-12-06 Thread Kirk M
If you have plugins installed, either activated or deactivated (or Inactive), all installed plugins need to be kept updated irregardless. All the reasons have been given already and are very true indeed. Here's my own example...I keep my standard active plugins slimmed down to less than 10.

Re: [wp-testers] Re: Is this possible....

2008-12-06 Thread Jeff Chandler
Ok so, I guess it would be best to just delete the darn things and that would solve the problem of being nagged and having to deal with the issue. Kirk M wrote: If you have plugins installed, either activated or deactivated (or Inactive), all installed plugins need to be kept updated

Re: [wp-testers] Re: Is this possible....

2008-12-06 Thread Kirk M
Wow, this is getting to be quite an issue. Jeff, didn't this exact same issue came up when plugin update notification was first introduced (2.5 maybe?-not sure anymore)? I seem to remember the same type of go-around. Anyway, I guess the whole thing boils down to whether or not the developers

Re: [wp-testers] Re: Is this possible....

2008-12-06 Thread Stephen Rider
I don't want to delete the maybe plugins because I'll forget them between now and when I think I'll need them. What I do sometimes is go through the deactivated plugins and .zip them up. That way: 1) they can't be exploited, 2) no update notifications, 3) no clutter on the plugins

Re: [wp-testers] Re: Is this possible....

2008-12-06 Thread Chris Moody
If a plugin is inactive, how can someone exploit it? Stephen Rider wrote: I don't want to delete the maybe plugins because I'll forget them between now and when I think I'll need them. What I do sometimes is go through the deactivated plugins and .zip them up. That way: 1) they can't be

Re: [wp-testers] Re: Is this possible....

2008-12-06 Thread Gaarai
Simple, by calling the php files directly and passing data to them. -- Chris Jean http://gaarai.com/ http://wp-roadmap.com/ Chris Moody wrote: If a plugin is inactive, how can someone exploit it? Stephen Rider wrote: I don't want to delete the maybe plugins because I'll forget them between