A lot of hosts discourage using FTP. My host encourages SFTP and has FTP shut off by default. I did a bit of poking around and did not find any way to have Update Manager use a more secure protocol like SFTP.

Is OOR using FTP or am I just not finding the settings where you enable a more secure protocol?

Thanks

Steve

Comments

nedjo’s picture

Yes, security is a general problem with Apps. You can find some information at http://drupal.org/documentation/modules/update, including details about using SSH.

In the case of Open Outreach, we don't even need to download anything, since so far we're packaging everything with the distro. I'm looking at what it would take to convince Apps it doesn't need to prompt for download info if there's nothing to download. A first step is #1707166: Add support for recognizing existing libraries in profile directory.

nedjo’s picture

Status: Active » Fixed

I'm hoping #1715608: Skip apps install if they're already in place will substantially help here.

Other than that, any further improvement would need to be done to the update manager in Drupal core.

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.