Best way to have someone work on your wordpress site

[workplay]

I'm looking to fix up somethings my wordpress site with thesis framework.

Most of people seem to be asking for the login information to work on the site.

What is the safe way to provide user login for a wordpress site?

My worry is that the person who gains access to the site may insert malicious code and leave backdoors somewhere.

One of my sites got hacked once when I gave them the admin info before.

 

[KraftyKyle]

NEVER GIVE OUT YOUR ADMIN INFO! You can create another user with privileges which will allow the person do utilize many WP functions beyond that of a normal subscriber. What work are they suppose to be doing for you?

 

[workplay]

NEVER GIVE OUT YOUR ADMIN INFO! You can create another user with privileges which will allow the person do utilize many WP functions beyond that of a normal subscriber. What work are they suppose to be doing for you?

Just editing css style and php files for the theme. When I make a login for them how can I edit their privileges?

When I go to add a new user, I see options "adminitrator, editor, author...." which do i choose?

 

[jonnyquest]

What the other guys are saying ...

Here is a quick look at the difference of what an outsource worker
would see and have access to while you as the Admin gets it all

I would say use the EDITOR How about others?

Hope this helps

JQ

 

[workplay]

What the other guys are saying ...

Here is a quick look at the difference of what an outsource worker
would see and have access to while you as the Admin gets it all

I would say use the EDITOR How about others?

Hope this helps

JQ

Would they have access to edit css and php files with just "editor" privilege? I don't think i see that option as editor.

 

[nik-0]

No they won't

 

[jonnyquest]

Would they have access to edit css and php files with just "editor" privilege? I don't think i see that option as editor.

What Nik-0 said

JQ

 

[LilithX]

Well, what I did when I had someone work on my site was use a plugin called WordPress File Monitor Plus and it tells me what files were added/changed/deleted and it gets sent straight to my e-mail. Better than nothing I guess.

Another option would be to give them limited ftp access through your cpanel to the direct folder.

 

[workplay]

Well, what I did when I had someone work on my site was use a plugin called WordPress File Monitor Plus and it tells me what files were added/changed/deleted and it gets sent straight to my e-mail. Better than nothing I guess.

Another option would be to give them limited ftp access through your cpanel to the direct folder.

wouldn't ftp access give them more freedom than wp admin login?

 

[elcappy]

Well, what I did when I had someone work on my site was use a plugin called WordPress File Monitor Plus and it tells me what files were added/changed/deleted and it gets sent straight to my e-mail. Better than nothing I guess.

Another option would be to give them limited ftp access through your cpanel to the direct folder.

That would still allow them to throw malicious code into existing files. I guess you just have to trust the person or that person has to have a good rep/review.

 

[kennyrip]

download the files they need to work on, then send them via email. when you get the files back check over it, or have someone look over it to make sure they didnt add any backdoors.

Thats how ive always done it

 

[workplay]

download the files they need to work on, then send them via email. when you get the files back check over it, or have someone look over it to make sure they didnt add any backdoors.

Thats how ive always done it

are there any programs or plugins to find backdoors? are they visible as outbound links?