Submit Plugin

[obenland]

Add the ability to upload a plugin, similar to how uploading themes works.

• Create an upload shortcode that can be used on any site.
• Run the uploaded files through ​basic checks.
• Add links to documentation for plugin authors.

[dd32]

@obenland Could we

• Use post_excerpt for the short description, rather than post_content? It'll make it more consistent to use post_content for the readme, and post_excerpt for the description that way.

Should we

• Ensure that ZIP filenames are not guessable?
• Use a specific slug prefix for zip files?
• Use the pending status for plugin requests?

[obenland]

1569.2.diff​ works with namespaces, uses post_excerpt for short descriptions, and pending for new plugins.

@dd32, any specific suggestions about prefixing zip filenames and making them not guessable?

[dd32]

@obenland You could use something like wp_generate_password(8) as the prefix for the zip.

I don't think the upload handler should include a lot of the logic you've got there (All the validation of the plugin should be in a separate class for example), but commit and iterate IMHO.

[obenland]

In 2625:

Plugins Directory: Introduce plugin uploader.

Happy iterating!

Props dd32, obenland.
See #1569.

[rmccue]

r2625 uses the attachment GUID for the filename, which ​we want to deprecate; this needs to use get_attached_file( $zip_file->ID ) instead.

[dd32]

In 2639:

Plugin Directory: Don't rely upon the GUID.
Props rmccue.
See #1569

[dd32]

In 2640:

Plugin Directory: Upload shortcode: Abstract out the filesystem handling and cleanup remaining themes-specific logic which don't apply to plugins.
See #1569

[obenland]

• Run the uploaded files through ​basic checks.
• Add links to documentation for plugin authors.

These items will be tackled outside of this ticket. Plugin-check can be developed as a separate plugin and hooked in later, the user-facing makeup of the upload page will like change based on ​the IA findings.

[obenland]

In 3025:

Plugin Directory: Use plugin root directly rather than recreating it.

See #1569.