My developer wants cpanel access to upload customized child theme, is it necessary?

11 replies
  • WEB DESIGN
  • |
Hi friends, I need your expert advice on this. I have my domain where I installed wp already and also installed the main theme. My developer customized the theme creating its child version on his own local server and now its time to upload the customized child theme folders on my domain and get the site online. I want them to do this thing via ftp whereas they want my cpanel login info. Is it necessary to give them cpanel access to upload customized folders?
Thanks in advance for any response.
#access #child #cpanel #customized #developer #theme #upload
  • Profile picture of the author ABN
    Log in to cPanel, click FTP Accounts, and create a new log in just for him/her. In the directory field, enter: wp-content/themes

    That will allow the person to view, add, delete folders and files, but only in that directory.

    However, why not have the theme provided to you as a zip, and simply use the WP admin to upload and activate?

    Advice: Do not provide cPanel access. It is not necessary. And, I suggest uploading the theme zip instead of providing FTP, as any of the themes could be tampered with.
    {{ DiscussionBoard.errors[9070161].message }}
  • Profile picture of the author webcosmo
    There is no need to provide him cPanel access. But maybe he wants to have some sort of leverage over you, to make sure you pay him
    {{ DiscussionBoard.errors[9070951].message }}
  • Profile picture of the author second2none
    Access to Cpanel allows him greater control over you. Both of the previous posts are spot on. You really need to be cautious because to much can be changed, added and deleted through Cpanel and unfortunately a password change wouldn't fix this.

    I wouldn't risk it unless you know him personally, but then again honestly I've never let anyone into my Cpanel.
    {{ DiscussionBoard.errors[9071520].message }}
    • Profile picture of the author Dr Rani
      Thanks everyone for your valuable suggestions. I am not going to give cpanel instead ask them to use ftp. Let see what happens then. Thanks again, it really helped
      {{ DiscussionBoard.errors[9072353].message }}
  • Profile picture of the author sktthemes
    Yes you can ask him to do this stuff using duplicator plugin so that he will be good to go using only wordpress admin and ftp details.
    {{ DiscussionBoard.errors[9072387].message }}
    • Profile picture of the author AZ-439
      You could use the duplicator plugin and not give cpanel access, but if it fails for any reason, he will need cpanel to access mysql to be able to properly merge the development database with the one that resides on your server. If you are concerned with giving your dev cpanel access, maybe it's time for a different dev...
      {{ DiscussionBoard.errors[9074204].message }}
      • Profile picture of the author RobinInTexas
        Originally Posted by AZ-439 View Post

        You could use the duplicator plugin and not give cpanel access, but if it fails for any reason, he will need cpanel to access mysql to be able to properly merge the development database with the one that resides on your server. If you are concerned with giving your dev cpanel access, maybe it's time for a different dev...
        You don't need cPanel access to access the database. You can manipulate the database if you have FTP access on most servers if WordPress is already installed.
        Signature

        Robin



        ...Even if you're on the right track, you'll get run over if you just set there.
        {{ DiscussionBoard.errors[9078846].message }}
  • Profile picture of the author burton247
    As Everyone has said no, only FTP is required. Or backend WP access and upload the theme via theme installer section
    {{ DiscussionBoard.errors[9078284].message }}
  • Profile picture of the author copilu0
    All that he needs is FTP access to upload the child theme. He doesn't need any access to your cPanel.
    He needs cPanel access only if he needs to install wordpress and create a new database but you said that WP is already installed so this should not be a problem.
    {{ DiscussionBoard.errors[9079993].message }}
  • Profile picture of the author SteveJohnson
    What all you advice-givers don't seem to understand is that if you let me upload files to your server, you've opened the door wide open. If I wanted to mess you up, all I need to do is give you a zip file that contains your child theme -- along with a few little goodies of my own -- and let you upload and activate it...then you're all mine. I don't need cPanel logins, I don't need FTP logins.

    The bottom line is if you don't trust your developer, you'd better not be uploading anything they give you. Do your due diligence, generate a backup of your cPanel account, then give your developer access if you find you can trust them. When they're done, delete the developer's WP account, change the hosting account password, and change the database password.
    Signature

    The 2nd Amendment, 1789 - The Original Homeland Security.

    Gun control means never having to say, "I missed you."

    {{ DiscussionBoard.errors[9081783].message }}
    • Profile picture of the author Khaled0031
      Originally Posted by SteveJohnson View Post

      What all you advice-givers don't seem to understand is that if you let me upload files to your server, you've opened the door wide open. If I wanted to mess you up, all I need to do is give you a zip file that contains your child theme -- along with a few little goodies of my own -- and let you upload and activate it...then you're all mine. I don't need cPanel logins, I don't need FTP logins.

      The bottom line is if you don't trust your developer, you'd better not be uploading anything they give you. Do your due diligence, generate a backup of your cPanel account, then give your developer access if you find you can trust them. When they're done, delete the developer's WP account, change the hosting account password, and change the database password.
      I'm having similar issues, I have HTML files that a developer has sliced from PSD files. Now he wants access to Cpanel. I have Wordpress installed and created FTP accounts. I need a user account login system, a partner account login system and an admin login system that can manage both, so does he really need my Cpanel login name and pass? if not then what does he need?
      {{ DiscussionBoard.errors[9679347].message }}

Trending Topics