[Koha] Is Koha plugin system safe?

Jonathan Druart jonathan.druart at bugs.koha-community.org
Thu Apr 16 22:54:23 NZST 2020

Hi Michal,

It depends on the plugin :)
A plugin can do almost everything it wants, so you should only install
plugins you really trust.
And you should give the permissions to manage them to librarians you
really trust as well.

I should add that plugins are almost never reviewed (by the QA team
for instance), so they could potentially contain security issues.


Le jeu. 16 avr. 2020 à 12:28, Michał Dudzik <dudzikmichal at wp.pl> a écrit :
> The koha plug-in system enables easy system expansion with an additional
> non-standard function.
> I have received several queries from librarians about the security of the
> plug-in system.
> Personally, I have not observed any problems, so I would like to ask if
> using the plug-in system is safe?
> Regards,
> Michal
> --
> Sent from: http://koha.1045719.n5.nabble.com/Koha-general-f3047918.html
> _______________________________________________
> Koha mailing list  http://koha-community.org
> Koha at lists.katipo.co.nz
> Unsubscribe: https://lists.katipo.co.nz/mailman/listinfo/koha

More information about the Koha mailing list