Plugin Actions
This feature will prevent the following actions on plugins:
- Install a new plugin: Even if you upload a folder into your
/wp-content/plugins/
folder, SecuPress will prevent the possibility to activate it and arrange a new "Attempted Installation" tab where you can find them. - Activate a plugin: Even if it's already installed before the activation of the feature, you cannot activate them. Even if someone/something modify the
active_plugins
entry in you database (hello malwares), these plugins won't be activated, and again will be arrange in a new tab "Attempted Activation". - Deactivate a plugin: Same thing here but with the deactivation action.
- Delete a plugin: Even deleted plugins can be tracked down. If it's a plugin from wp.org, and a malware deleted it using code, it can be reinstalled in 1 click. (yes, we can not prevent hard disk actions), if not, you can still check the "Attempted Deletion" tab.
If you encounter an error notice indicating that the module will not be effective, try to deactivate the feature, then using FTP, remove the file /wp-content/mu-plugins/(secupress_no_plugins_installation).php
; then retry activating the feature. If not working, drop us a message at support@secupress.me.