Support for Drupal 7 is ending on 5 January 2025—it’s time to migrate to Drupal 10! Learn about the many benefits of Drupal 10 and find migration tools in our resource center.
A lot of hosts discourage using FTP. My host encourages SFTP and has FTP shut off by default. I did a bit of poking around and did not find any way to have Update Manager use a more secure protocol like SFTP.
Is OOR using FTP or am I just not finding the settings where you enable a more secure protocol?
Thanks
Steve
Comments
Comment #1
nedjoYes, security is a general problem with Apps. You can find some information at http://drupal.org/documentation/modules/update, including details about using SSH.
In the case of Open Outreach, we don't even need to download anything, since so far we're packaging everything with the distro. I'm looking at what it would take to convince Apps it doesn't need to prompt for download info if there's nothing to download. A first step is #1707166: Add support for recognizing existing libraries in profile directory.
Comment #2
nedjoI'm hoping #1715608: Skip apps install if they're already in place will substantially help here.
Other than that, any further improvement would need to be done to the update manager in Drupal core.