Page 1 of 1

Safe to allow FTP full access to unknown developers?

Posted: Tue Mar 13, 2018 12:30 am
by bulgin
I am trying to get a template to work and as I review the developer's forum for some of the common issues, I notice that the first response from the developer is to allow full ftp access even before suggesting changes that the admin can make.

I'm pretty adept at working with .css files, directories, etc. and explained that to the developer, but they insist they need full FTP access.

Is this considered normal? Couldn't some malicious software get installed? Or some other nefarious things happen with FULL access?

This is a Centos version 6 VPS server running the most recent version of Joomla.

Thanks in advance.

Re: Safe to allow FTP full access to unknown developers?

Posted: Tue Mar 13, 2018 1:45 am
by sozzled
@bulgin: I have several problems with this topic because of the way it's written.

1) I think your claims that "developers" (in the majority of cases) require any access to change data on other people's websites are vastly overrated. I, for one, never require not request backend access to another person's website unless we have a contract and I'm being paid for that service. I have not seen this sort of behaviour here on the Joomla forum. If you are aware of people soliciting this kind of access then I think you should report it to the forum moderators.

2) It is not a matter for me or any other member of this community to tell you what is "normal" business practice or not. I would not, personally, allow someone I didn't know to have any backend/FTP access to any of my sites. You do what you want to do, of course.

3) it depends on what needs to be fixed with a problem site template. I don't spend my time fixing broken templates by replacing files via FTP. I do fix styling problems with CSS. You don't need FTP access to change CSS files.

4) If a template is hopelessly broken and the creator of that template can't provide me with an update to fix these problems, it's much cheaper to replace the template with another one.

Re: Safe to allow FTP full access to unknown developers?

Posted: Tue Mar 13, 2018 1:59 am
by creativesights
Generally, I concur. However, if you've paid money to this template company and if it's a well established company, you may consider creating a limited use FTP account that you can give to them and then deactivate it when they're done.

FTP access isn't something you should be giving out lightly.

Although you don't have to have it, I use FTP for editing files because it's faster and as I'm being paid for my time, I generally feel it's my responsibility to get things done as quickly and as properly as possible.

Re: Safe to allow FTP full access to unknown developers?

Posted: Thu Mar 15, 2018 5:02 am
by pelister
As long as you trust the developer, giving FTP access is not a problem, I have seen people giving ftp access to work on their sites., also there is no other way when only FTP access is the only way to solve a problem.

Re: Safe to allow FTP full access to unknown developers?

Posted: Fri Apr 06, 2018 3:55 pm
by jonnybhoy
It's a tricky one. I previously used a web guy who turned out to be a black-hat b***ard and not to be trusted, over time I realised the claims he made and targets he set were bull. Other web guys have been decent and honorable, but not sure I would trust someone other than my web hosting company, unless I had dealt with them for a long time and felt they had earned my trust.

Re: Safe to allow FTP full access to unknown developers?

Posted: Fri Apr 06, 2018 4:38 pm
by Webdongle
Give the dev the template files to work on. Then if you can't install the the finished product the dev will need full ftp and Joomla access.

Re: Safe to allow FTP full access to unknown developers?

Posted: Fri Apr 06, 2018 4:45 pm
by jonnybhoy
Great tip, thanks. Just need to find me a dev for getting Joomla up and running!

Re: Safe to allow FTP full access to unknown developers?

Posted: Fri Apr 06, 2018 4:53 pm
by Webdongle

Re: Safe to allow FTP full access to unknown developers?

Posted: Fri Apr 06, 2018 4:55 pm
by jonnybhoy
Thank you for the link, I appreciate your help.