Aaron Winborn

On IRC, Károly Négyesi (better known as chx) asked me about the status of the Drupal FTP project. He was concerned that it stores FTP usernames and passwords, which could open up the possibility for security holes and malware if extended or used improperly. Additionally, one of its stated goals was as a possible means to automatically download and install modules on one's site, which is also a stated goal for the Plugin Manager Summer of Code project.

At first, I said that I would remove the project entirely, as I hadn't worked on it in over a year, and had no intention of continuing development in the near future. Even at that time, although I saw the possibility for using it to install modules on your site, I wasn't really that interested in pursuing that aspect, as I really didn't want to get into the security issues involved.

However, I decided to post to the Developer's list first, to get further feedback before removing the project. I had had a few queries regarding the project over the past year, and suspected that there might be some developers actually using it. Additionally, I wanted to find out if there were any compelling reasons to actually keep the module in the project repository.

Turns out to have been a good thing, it looks like. Not only are there a few people actually using the module, I was reminded of other efforts to use FTP with Drupal, most notably Media Mover and, of course, the upcoming Plugin Manager module.

Read on...