Posting in the Magento forums has been disabled pending the implementation of a new and improved forum solution which should better serve the community.

For new questions please post at magento.stackexchange.com, the community-run support site for the Magento community. We will be providing updates on the new forum solution soon. For questions or concerns please email community@magento.com.

Magento Forum

How secure are Magento Connect extensions? 
 
AaronHicks
Jr. Member
 
Total Posts:  8
Joined:  2011-08-16
 

Hi everyone,

I’m thinking about installing an extension off of Magento Connect, but would first like to know if there is a screening process before the extensions are posted to ensure no malicious activity is being perpetrated within the extension’s code.

Thanks,
Aaron

 
Magento Community Magento Community
Magento Community
Magento Community
 
NeilA
Moderator
 
Avatar
Total Posts:  1372
Joined:  2007-09-17
Blue Mountains, Oz
 

They are all checked and approved by the Magento team (specifically Rhonda!) before they are made available.

Regards

 
Magento Community Magento Community
Magento Community
Magento Community
 
Rhonda_Rondeau
Enthusiast
 
Total Posts:  924
Joined:  2010-08-03
Culver City
 

Greetings..

For free extensions we check for file integrity to make sure that the package works. We check to be sure that it meets all the guidelines, review the landing page url (for paid extensions) but we do not test every extension for functionality.

The best thing to do is look at the extension reviews, read the description completely and make sure that you have a person to contact for support.

It would be difficult to test functionality for every extension as no two setups for CE are alike.  With Magento 2.0 extensions (1.5 or higher versions of magento) we provide support for dependencies.  You can read more here: http://www.magentocommerce.com/wiki/7_-_magento_connect/differences_in_magento_connect_versions so if there is a problem with the extension you are attempting to install—our system should be able to warn you.

This is why we don’t suggest manual installations and to use Magento Connect.

If you have any questions, I’m rhonda at magento dot com

on that note, we are introducing TRUSTED EXTENSIONS.. read more here: http://www.magentocommerce.com/magento-connect/trusted_extension/

 
Magento Community Magento Community
Magento Community
Magento Community
Magento Community
Magento Community
Back to top