Safe to allow FTP full access to unknown developers?

Relax and enjoy The Lounge. For all Non-Joomla! topics or ones that don't fit anywhere else. Normal forum rules apply.
Joomla! Intern
Joomla! Intern
Posts: 93
Joined: Sun Sep 30, 2007 10:18 pm

Safe to allow FTP full access to unknown developers?

Postby bulgin » Tue Mar 13, 2018 12:30 am

I am trying to get a template to work and as I review the developer's forum for some of the common issues, I notice that the first response from the developer is to allow full ftp access even before suggesting changes that the admin can make.

I'm pretty adept at working with .css files, directories, etc. and explained that to the developer, but they insist they need full FTP access.

Is this considered normal? Couldn't some malicious software get installed? Or some other nefarious things happen with FULL access?

This is a Centos version 6 VPS server running the most recent version of Joomla.

Thanks in advance.
Last edited by imanickam on Tue Mar 13, 2018 3:48 am, edited 1 time in total.
Reason: Moved the topic from the forum Administration Joomla! 3.x to the forum The Lounge

User avatar
Joomla! Virtuoso
Joomla! Virtuoso
Posts: 4526
Joined: Sun Jul 05, 2009 3:30 am
Location: Canberra, Australia

Re: Safe to allow FTP full access to unknown developers?

Postby sozzled » Tue Mar 13, 2018 1:45 am

@bulgin: I have several problems with this topic because of the way it's written.

1) I think your claims that "developers" (in the majority of cases) require any access to change data on other people's websites are vastly overrated. I, for one, never require not request backend access to another person's website unless we have a contract and I'm being paid for that service. I have not seen this sort of behaviour here on the Joomla forum. If you are aware of people soliciting this kind of access then I think you should report it to the forum moderators.

2) It is not a matter for me or any other member of this community to tell you what is "normal" business practice or not. I would not, personally, allow someone I didn't know to have any backend/FTP access to any of my sites. You do what you want to do, of course.

3) it depends on what needs to be fixed with a problem site template. I don't spend my time fixing broken templates by replacing files via FTP. I do fix styling problems with CSS. You don't need FTP access to change CSS files.

4) If a template is hopelessly broken and the creator of that template can't provide me with an update to fix these problems, it's much cheaper to replace the template with another one.
Former member of Kunena project team
If you think I’m wrong then say “I think you're wrong.” If you say “You’re wrong!”, how do you know?

User avatar
Joomla! Guru
Joomla! Guru
Posts: 549
Joined: Tue Jan 13, 2009 11:50 pm
Location: San Diego, California, USA

Re: Safe to allow FTP full access to unknown developers?

Postby creativesights » Tue Mar 13, 2018 1:59 am

Generally, I concur. However, if you've paid money to this template company and if it's a well established company, you may consider creating a limited use FTP account that you can give to them and then deactivate it when they're done.

FTP access isn't something you should be giving out lightly.

Although you don't have to have it, I use FTP for editing files because it's faster and as I'm being paid for my time, I generally feel it's my responsibility to get things done as quickly and as properly as possible.
Andrew Crossan
Professional Custom Website Design & Development in San Diego

Joomla! Apprentice
Joomla! Apprentice
Posts: 7
Joined: Mon Oct 24, 2011 10:21 am

Re: Safe to allow FTP full access to unknown developers?

Postby pelister » Thu Mar 15, 2018 5:02 am

As long as you trust the developer, giving FTP access is not a problem, I have seen people giving ftp access to work on their sites., also there is no other way when only FTP access is the only way to solve a problem.

Return to “The Lounge”

Who is online

Users browsing this forum: No registered users and 6 guests