Justin

Seems like the solution for those of us who’d like better security is to allow it to be stored in wp-config.php which is much less likely to be hacked than the DB. You could still allow lay-persons to store it in their DB in plain text for simplicity but it really is best to store it in wp-config.php with the other sensitive info like Database and FTP credentials.

Just as an FYI, you must turn on: define('WP_DEBUG', true); in wp-config.php to see these errors/notices.

Please fix them in the plugin devs!

WordPress also stores FTP info in that same PHP config file: https://wordpress.stackexchange.com/questions/48/how-can-i-stop-wordpress-from-prompting-me-to-enter-ftp-information

I would hope it doesn’t save them to the DB. However It could save/load them from a PHP config file just like WordPress does with the DB connection info.

I’m not positive I understand your question, but if you are asking if when I delete a file via SFTP with a tool like FileZilla am I prompted to login, I suppose the answer is yes, once, then I am able to delete anything I want until I close the connection.

What I don’t understand is why the plugin (since it has clearly saved all my SSH info) is showing me the screen to enter all my info again when I perform an action that uses the plugin (like deleting a theme). It seems like it’s just confirming my info every time, which is unnecessary.