Approving Plugins

Starting in release 3.0, Tiki provides additional security for plugins. Some plugins must be approved before becoming active. You can approve plugins as they appear on each wiki page, or from the Plugin Approval page.

Approving Plugins on Wiki Pages

1. When Tiki discovers a newly added plugin that requires approval, the following message appears:
   
2. Click View Details to review the plugin. Tiki displays detailed information regarding the plugin, including its name and parameters
3. Select one of the following options:
   • To approve the plugin, click Approve to make the plugin "live." Tiki reloads the page, fully executing the plugin code.
   • To reject the plugin, click Reject to disapprove the plugin and deny its execution. Tiki displays the following message:
     
     You should edit the page and remove (or update) the denied plugin code.
   • To preview the plugin output once, click Preview. Tiki reloads the page and executes the plugin. But on subsequent page visits, the plugin will not execute

Using the Plugin Approval Page

Instead of approving plugins on a page-by-page basis, you can globally approve (or reject) all pending plugins at once. The Plugin Approval page lists all pending plugins.

1. From the Administration page, click Editing and Plugins. The Text Area page appears.
2. Click the Plugins tab.
3. On the Plugins tab, click the tiki-plugins.php link.
   
   

    Tip

   Use the Check disabled plugins button to automatically check if a wiki page uses a plugin that has not been enabled. See Enabling Plugins for details.
4. On the Plugins tab, click the tiki-plugins.php link.
5. On the Plugin Approval page, select the specific plugins to approve, and click Approve.
   

For each pending plugin, Tiki will display:

• the plugin and its unique security ID
• the location of the page (for plugins included on wiki pages)
• the user who added the plugin or last visited the page

You can approve or deny specific plugins:

• To approve a specific plugin, click Approve .
• To reject a specific plugin, click Clear .
• To approve or reject specific plugins, select the plugins, and select the appropriate action from the drop list.
• To approve all pending plugins, click Approve all pending plugins.