SSH Info requested repeatedly

Does it re-prompt you for credentials when doing things via FTP? I imagine it would – that it’s probably logging in via FTP / SFTP and actively deleting the files associated with that plugin / theme. If that’s the case then that’s just the way WordPress is designed. It’d have to ask you for your credentials each time..

I’m not positive I understand your question, but if you are asking if when I delete a file via SFTP with a tool like FileZilla am I prompted to login, I suppose the answer is yes, once, then I am able to delete anything I want until I close the connection.

What I don’t understand is why the plugin (since it has clearly saved all my SSH info) is showing me the screen to enter all my info again when I perform an action that uses the plugin (like deleting a theme). It seems like it’s just confirming my info every time, which is unnecessary.

I’m not positive I understand your question, but if you are asking if when I delete a file via SFTP with a tool like FileZilla am I prompted to login, I suppose the answer is yes, once, then I am able to delete anything I want until I close the connection.

I mean like with other built-in WordPress methods. Like if you try to install a plugin via FTP, if you can, I imagine it’d behave similarly.

What I don’t understand is why the plugin (since it has clearly saved all my SSH info) is showing me the screen to enter all my info again when I perform an action that uses the plugin (like deleting a theme). It seems like it’s just confirming my info every time, which is unnecessary.

That’s probably your browser that’s saving the info – not the plugin. The plugin doesn’t save your info anywhere since doing so could constitute a vulnerability. ie. what if WordPress had an SQL injection vulnerability. Just SQL inject a SELECT and you get the SFTP credentials from the DB and then that SQL injection is the least of your concerns.

I would hope it doesn’t save them to the DB. However It could save/load them from a PHP config file just like WordPress does with the DB connection info.

WordPress also stores FTP info in that same PHP config file: https://wordpress.stackexchange.com/questions/48/how-can-i-stop-wordpress-from-prompting-me-to-enter-ftp-information

You should still be able to do that with this plugin. FTP_HOST, FTP_USER, FTP_PASS, FTP_PRIKEY are the constants you should be using.