Title: SSH Info requested repeatedly
Last modified: August 21, 2016

---

# SSH Info requested repeatedly

 *  [Justin](https://wordpress.org/support/users/justinchriscook/)
 * (@justinchriscook)
 * [12 years, 9 months ago](https://wordpress.org/support/topic/ssh-info-requested-repeatedly/)
 * Each time I remove a plugin or theme I am re-prompted to enter my SSH info (host,
   private key, etc), luckily it is already populated from the first time I filled
   it out. Is this a bug or a feature?
 * [http://wordpress.org/plugins/ssh-sftp-updater-support/](http://wordpress.org/plugins/ssh-sftp-updater-support/)

Viewing 6 replies - 1 through 6 (of 6 total)

 *  Plugin Author [TerraFrost](https://wordpress.org/support/users/terrafrost/)
 * (@terrafrost)
 * [12 years, 9 months ago](https://wordpress.org/support/topic/ssh-info-requested-repeatedly/#post-4053826)
 * Does it re-prompt you for credentials when doing things via FTP? I imagine it
   would – that it’s probably logging in via FTP / SFTP and actively deleting the
   files associated with that plugin / theme. If that’s the case then that’s just
   the way WordPress is designed. It’d have to ask you for your credentials each
   time..
 *  Thread Starter [Justin](https://wordpress.org/support/users/justinchriscook/)
 * (@justinchriscook)
 * [12 years, 9 months ago](https://wordpress.org/support/topic/ssh-info-requested-repeatedly/#post-4053831)
 * I’m not positive I understand your question, but if you are asking if when I 
   delete a file via SFTP with a tool like FileZilla am I prompted to login, I suppose
   the answer is yes, once, then I am able to delete anything I want until I close
   the connection.
 * What I don’t understand is why the plugin (since it has clearly saved all my 
   SSH info) is showing me the screen to enter all my info again when I perform 
   an action that uses the plugin (like deleting a theme). It seems like it’s just
   confirming my info every time, which is unnecessary.
 *  Plugin Author [TerraFrost](https://wordpress.org/support/users/terrafrost/)
 * (@terrafrost)
 * [12 years, 9 months ago](https://wordpress.org/support/topic/ssh-info-requested-repeatedly/#post-4053864)
 * > I’m not positive I understand your question, but if you are asking if when 
   > I delete a file via SFTP with a tool like FileZilla am I prompted to login,
   > I suppose the answer is yes, once, then I am able to delete anything I want
   > until I close the connection.
 * I mean like with other built-in WordPress methods. Like if you try to install
   a plugin via FTP, if you can, I imagine it’d behave similarly.
 * > What I don’t understand is why the plugin (since it has clearly saved all my
   > SSH info) is showing me the screen to enter all my info again when I perform
   > an action that uses the plugin (like deleting a theme). It seems like it’s 
   > just confirming my info every time, which is unnecessary.
 * That’s probably your browser that’s saving the info – not the plugin. The plugin
   doesn’t save your info anywhere since doing so could constitute a vulnerability.
   ie. what if WordPress had an SQL injection vulnerability. Just SQL inject a SELECT
   and you get the SFTP credentials from the DB and then that SQL injection is the
   least of your concerns.
 *  Thread Starter [Justin](https://wordpress.org/support/users/justinchriscook/)
 * (@justinchriscook)
 * [12 years, 9 months ago](https://wordpress.org/support/topic/ssh-info-requested-repeatedly/#post-4053865)
 * I would hope it doesn’t save them to the DB. However It could save/load them 
   from a PHP config file just like WordPress does with the DB connection info.
 *  Thread Starter [Justin](https://wordpress.org/support/users/justinchriscook/)
 * (@justinchriscook)
 * [12 years, 9 months ago](https://wordpress.org/support/topic/ssh-info-requested-repeatedly/#post-4053867)
 * WordPress also stores FTP info in that same PHP config file: [http://wordpress.stackexchange.com/questions/48/how-can-i-stop-wordpress-from-prompting-me-to-enter-ftp-information](http://wordpress.stackexchange.com/questions/48/how-can-i-stop-wordpress-from-prompting-me-to-enter-ftp-information)
 *  Plugin Author [TerraFrost](https://wordpress.org/support/users/terrafrost/)
 * (@terrafrost)
 * [12 years, 9 months ago](https://wordpress.org/support/topic/ssh-info-requested-repeatedly/#post-4053871)
 * You should still be able to do that with this plugin. FTP_HOST, FTP_USER, FTP_PASS,
   FTP_PRIKEY are the constants you should be using.

Viewing 6 replies - 1 through 6 (of 6 total)

The topic ‘SSH Info requested repeatedly’ is closed to new replies.

 * ![](https://s.w.org/plugins/geopattern-icon/ssh-sftp-updater-support.svg)
 * [SSH SFTP Updater Support](https://wordpress.org/plugins/ssh-sftp-updater-support/)
 * [Support Threads](https://wordpress.org/support/plugin/ssh-sftp-updater-support/)
 * [Active Topics](https://wordpress.org/support/plugin/ssh-sftp-updater-support/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/ssh-sftp-updater-support/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/ssh-sftp-updater-support/reviews/)

## Tags

 * [login](https://wordpress.org/support/topic-tag/login/)

 * 6 replies
 * 2 participants
 * Last reply from: [TerraFrost](https://wordpress.org/support/users/terrafrost/)
 * Last activity: [12 years, 9 months ago](https://wordpress.org/support/topic/ssh-info-requested-repeatedly/#post-4053871)
 * Status: not resolved