Individual Theme upload for users

Hey there,

i wonder if there's a well known way to offer users the possibility to upload there own specific theme for only one blog.

I'm in a closed invironment with lots of trust to the users and so would like to offer them a possibility to use the upload function to upload a theme and have it automatically enabled for the blog where it got uploaded.

Any idea?

Thx,
Frank

  • PC

    Hello Helmi,

    Greetings and thanks for writing on the forums.

    I did some search and found the below links which might give you a lil bit of info on why this feature is not available on WordPress Multisite

    http://codex.wordpress.org/Create_A_Network

    A multisite network can be very similar to your own personal version of WordPress.com. End users of your network can create their own sites on demand, just like end users of WordPress.com can create blogs on demand.

    A multisite network is a collection of sites that all share the same WordPress installation. They can also share plugins and themes. The individual sites in the network are virtual sites in the sense that they do not have their own directories on your server, although they do have separate directories for media uploads within the shared installation

    http://codex.wordpress.org/Multisite_Network_Administration

    The capabilities of the site administrator role are also reduced in a WordPress Network. Site admins cannot install new themes or plugins and cannot edit the profiles of users on their site. Only the Network Admin (aka Super Admin) has the ability to perform these tasks in a WordPress network.

    http://en.support.wordpress.com/themes/

    Uploading Custom Themes

    The theme upload functionality is exclusive to privately hosted blogs and sites using the WordPress.org software. This means that you cannot upload any themes to your WordPress.com blog (even if they’re available at the WordPress.org theme repository)

    http://en.support.wordpress.com/themes/adding-new-themes/

    Because of the way WordPress.com’s technical infrastructure is designed, we are not able to support uploading of custom WordPress themes on our service.

    A multisite install is just like a wordpress.com architecture and uploading themes and plugins by the subsite admins is not permitted.

    If wordpress.com enables the users to upload their own custom themes on their network and if by mistake or intentionally some or other user ends up uploading a theme which has got some malicious code, that might kill the whole network.

    This is the best I could find on this issue. If you have more questions, I would discuss this with my colleagues and see if this has got a workaround :slight_smile:

    Cheers
    PC

  • Helmi

    Hi guys,

    of course i know why this isn't available in the default wordpress multisite setup but we're here to do things beyond that, right? :slight_smile:

    There so many things you can use multisite installations for and in my case it would be crucial to have single users able to upload there own themes that are then available to one blog only.

    I think this could also be a possible feature in other environments for example as a paid feature.

    Making them a super admin isn't an option here.

  • PC

    Hello Helmi,

    Greetings of the day and apologies for the delay on this one.

    I discussed this with my colleagues and found that this could lead to a huge security risk. The below questions might get you an idea on why it could be a risk.

    Will the user uploading the theme check the theme code out ?
    Will they use credible sources to download themes ?
    Will they take care of updating the themes ?
    Will they leave insecure themes on the install ?

    There have been examples of sites getting hacked due to the themes not being updated

    https://premium.wpmudev.org/forums/topic/ah-crap-timthumb-got-hacked

    This functionality you are looking for can not be achieved without custom development, you may post a project @ WPMU JOBS and get a developer right on to it.

    PS : You can trust all your individual users, but can you trust a random code ?

    Also I would like to drive your attention to a great post here

    Cheers
    PC

Thank NAME, for their help.

Let NAME know exactly why they deserved these points.

Gift a custom amount of points.