Web Hosting Forum | Lunarpages

Author Topic: FTP Temporary Account Set up  (Read 10748 times)

Offline kypsah

  • Galactic Royalty
  • *****
  • Posts: 219
    • http://www.kypsah.com
FTP Temporary Account Set up
« on: June 28, 2017, 10:25:10 AM »
I'm needing help setting up an FTP account through CPanel that will give someone access to only database files and not my CPanel or billing account. 

The purpose for this is to give my site's theme developer access to the site so that he can make changes in order to fix a few problems I'm having.

Thanks!
Eyes are the windows of the soul, but through the heart, the mouth speaks.

Jessie :)

Offline MrPhil

  • Senior Moderator
  • Berserker Poster
  • *****
  • Posts: 6227
Re: FTP Temporary Account Set up
« Reply #1 on: June 28, 2017, 03:23:26 PM »
Over the years, I've seen from time to time such requests to allow third parties access to just part of a site, but don't recall if anyone ever came up with a good solution. First of all, are you on cPanel or LPCP? If it's actually LPCP, I'll move this thread over to that board. Second, when you say "database files", that's confusing. Is your developer to have access to the database, or to your site's files? Not even site owners have access to the files that make up the database. For a theme developer, I'm guessing that you want to grant access just to files.

It is possible to set up FTP accounts with ID and password. I think the developer would be limited to uploading (and maybe downloading) files from one specific FTP directory (I haven't played with this in years). All I can think of is a "cron" mechanism to copy changed files from there into wherever the theme files belong, every 3 to 5 minutes or so. It would be quite a bit of work to set up, but might be feasible. I don't know if an FTP account can be set up to work directly in an arbitrary directory (e.g., the theme directory). Maybe support would know?
Visit My Site

E-mail Me
  
-= From the ashes shall rise a sooty tern =-

Offline kypsah

  • Galactic Royalty
  • *****
  • Posts: 219
    • http://www.kypsah.com
Re: FTP Temporary Account Set up
« Reply #2 on: June 29, 2017, 10:05:46 AM »
Over the years, I've seen from time to time such requests to allow third parties access to just part of a site, but don't recall if anyone ever came up with a good solution. First of all, are you on cPanel or LPCP? If it's actually LPCP, I'll move this thread over to that board.

Mr. Phil, first, thanks for your help!  Secondly, it is LPCP.  My apologies for the wrong board.  My other site is cPanel but this one I'm requesting help on is LPCP. 

Quote
Second, when you say "database files", that's confusing. Is your developer to have access to the database, or to your site's files? Not even site owners have access to the files that make up the database. For a theme developer, I'm guessing that you want to grant access just to files.

You're correct.  Apparently, in order to fix a few problems I have with the theme I purchased recently from this particular developer, they need FTP access to the site.  This is alarming because I don't want to inadvertently give him access to the account, LPCP, etc. 

Quote
It is possible to set up FTP accounts with ID and password. I think the developer would be limited to uploading (and maybe downloading) files from one specific FTP directory (I haven't played with this in years). All I can think of is a "cron" mechanism to copy changed files from there into wherever the theme files belong, every 3 to 5 minutes or so. It would be quite a bit of work to set up, but might be feasible. I don't know if an FTP account can be set up to work directly in an arbitrary directory (e.g., the theme directory). Maybe support would know?

It sounds like too much for someone like me, Mr. Phil.  I appreciate your brainstorming ideas that you came up with that I would have NEVER come up with myself.  However, I'm thinking the site will have to be the way that it is.  I think it's just WAY too risky to give FTP info out in any capacity.

Thank you SO much for your help and helping me to reach this conclusion!

<split up questions and replies -- Mod.>
« Last Edit: June 29, 2017, 10:10:40 AM by MrPhil »
Eyes are the windows of the soul, but through the heart, the mouth speaks.

Jessie :)

Offline MrPhil

  • Senior Moderator
  • Berserker Poster
  • *****
  • Posts: 6227
Re: FTP Temporary Account Set up
« Reply #3 on: June 29, 2017, 10:18:51 AM »
Well, if that's too much, would it be adequate to set up an FTP account for the developer, copy your files into it, have him develop and test as best he can on another system, upload the changed files to the FTP account, and you copy them back to their final place for your testing? It would be a shame to put up with a problematic site just because you feel you can't trust the developer. If you can't get references for them, it's understandable that you'd be wary, but a signed contract spelling out that they are not to go into any other part of the site would go a long way in court (you would grant them full FTP/cpanel access, but not account access). And after they finish, change all passwords before making the final payment. Know what files are there before the developer starts, so you can check for backdoors and trojans and any unauthorized modifications.

I'll move this over to the LPCP board, in case anyone watching there has another solution.
Visit My Site

E-mail Me
  
-= From the ashes shall rise a sooty tern =-

Offline kypsah

  • Galactic Royalty
  • *****
  • Posts: 219
    • http://www.kypsah.com
Re: FTP Temporary Account Set up
« Reply #4 on: June 29, 2017, 02:22:11 PM »
Well, if that's too much, would it be adequate to set up an FTP account for the developer, copy your files into it, have him develop and test as best he can on another system, upload the changed files to the FTP account, and you copy them back to their final place for your testing? It would be a shame to put up with a problematic site just because you feel you can't trust the developer. If you can't get references for them, it's understandable that you'd be wary, but a signed contract spelling out that they are not to go into any other part of the site would go a long way in court (you would grant them full FTP/cpanel access, but not account access). And after they finish, change all passwords before making the final payment. Know what files are there before the developer starts, so you can check for backdoors and trojans and any unauthorized modifications.

I'll move this over to the LPCP board, in case anyone watching there has another solution.

Sadly, I'm just not the savvy.  Since it's for a non-profit site, I think I'll bypass the developer and see if I can locate someone more experienced with website editing, themes, etc. than myself. 

Your reply sounds logical and relatively simple but...it isn't...for me.

Thanks for your help, Mr. Phil :)
Eyes are the windows of the soul, but through the heart, the mouth speaks.

Jessie :)

 

Share |