WordPress plugins blocklist

Dusan

Can you guys add an option for WordPress plugins blocklist, serverwide, or per package, and prevent clients installing them via Dashboard, FTP, uploading, etc?

Shaijee

Dusan per package

grradmin

AdamM

LuisMiguel

kasperstuck

slimx

This could surely be overriden though... i dont see how a panel could "Block" it?

hwcltjn

slimx I was just thinking the same, and @manu is right - you just rename the plugin and upload it manually.

@Dusan What plugins would you want to block anyway?

manu

I can easily change the name of the plugin and upload. There has to be some form of a scanner in place which would do this job. But I wouldn't expect a panel to do this.

Oldschool

hwcltjn On a package level I'd like to block woocommerce on the lower end packages.

hwcltjn

Oldschool You're going to have a very hard time doing that.
Just adjust your marketing appropriately to encourage users not to upgrade their package if they want to use WooCommerce, and apply resource limits on lower end products instead.

deydod

I don't think that this can be automated, however you can put this into wp-content/mu-plugins folder:

<?php
/*
Plugin Name: Block WooCommerce Activation
Description: Prevents WooCommerce from being activated.
Author: Your Name
Version: 1.0
*/

add_action('admin_init', 'prevent_woocommerce_activation');

function prevent_woocommerce_activation() {
    // Check if WooCommerce is attempting to activate
    if (is_plugin_active('woocommerce/woocommerce.php')) {
        deactivate_plugins('woocommerce/woocommerce.php');
        wp_die(
            __('WooCommerce activation is blocked on this site.', 'block-woocommerce-activation'),
            __('Activation Blocked', 'block-woocommerce-activation'),
            ['back_link' => true]
        );
    }
}

Once Enhance make post installation scripts available, it should be pretty easy to automate this.

slimx

Yeah but again, this is accessible to the customer. I do not think this feature (that the OP wants) is a possibility (in PHP at least).

Any half-experienced website manager will be able to circumvent any counter-measure.

FabioP

+1 for me