Removing one addon removes everything

agriz

I just tried to remove one addon. I clicked the remove button and then clicked the ok from the pop up. Suddenly all my addons were removed

x00

This is a feature which I have asked them the remove in future versions, becuase of these mishaps. File permissions should never be this high as this. I take it you have chmod 777, becuase cheap host give the impression this is sensible thing to do when it isn't. It is down to laziness on their part not providing a proper interface to manage file permissions and groups. If you could assign to the web user/group you would never to need to set permissions as high as 777, unfortunately with budget shared hosts you don't have this control.

I take it you are using a javascript minifiier also? if so disable it, it is not a good idea to use such things. They corrupt code, and it is a flawed methodology. The only time this should be used is part of a build process.

Your file permissions should not allow it anyway. Set you file permissions an group appropriately so it is not possible for (any application), to remove files except those specifically assigned to web user, ie, cache, uploads, etc.

As a webmaster it is your responsibly to understand, and mange yourself, the files.

I'm not having a go at you (sorry if it come across that way), I'm just explaining, as a webmaster you should learn these things, it comes with the job. Many people don't understand this and don't bother to learn, or aren’t even aware. Similarly with server rules like .htaccess.

If you want to remove plugin folders, remove them manually.

agriz

file permissions are 0644 and folder permissions are 0755

x00

owner/group?

peregrine

As @x00 if you see remove in your dashboard (which you will not see if permissions for group and owners are tightened up). DON'T USE REMOVE it can cause problems. Do it manually.

see this for more info

http://vanillaforums.org/discussion/23903/i-removed-a-plugin-from-the-dashboard-and-all-my-plugins-disappeared

vrijvlinder

Ugh! I know what you mean this happened to me..... I seriously don't think the cause are the permissions, there is no remove all plugins command is there ? .

There is a bug in there somewhere maybe even a plugin that contains removefrom config or something like that.

I made a backup folder for my plugins called old.plugins so in case it happens again I don't lose everything.

I tested removing plugins from the dashboard and it was ok did not lose everything. Tested it on 4 more installs no problems...

May I ask which plugin it was that you removed ?

peregrine

the point is, its hard to guard against unknowns, that cause jumping to other directories, etc. So @x00 suggested its removal.

But the other point is - if you see remove in your dashboard, the combination of your folder permissions, and owner and group is not as secure as it could be.

vrijvlinder

is not as secure as it could be.

Yes , I just avoid removing from the dashboard since then. I use filezilla and delete from there. I also recommend to people to avoid removing from dashboard.