What is the preferred approach when installing modules into Magento? Automatic through the Magento Connect Manager or manually by uploading the module to the server? The reason I'm asking is that I've heard lots of conflicting stories concerning both approaches.
0
votes
2 Answers
2
votes
I would always suggest going through Magento Commerce but its not available for all extensions. They have to be approved by Magento before they are listed in the store.
But keep in mind, just because it was approved, it doesn't mean its tested or safe.
You can install manually, just do it via FTP so you can see if it replaces any files. If the module tries to replace any files (and you didnt previously install the extension) then I would not use that module. A module should never replace core files, just over ride them so just watch for that.
But either way is safe and fine in general. But it doesnt mean if its done one way there wont be problems. I wouldnt say either is more safe.
1
votes
Ask yourself this:
"Would I upload code to my eCommerce application server - sight unseen - and allow it to execute arbitrary code with full write access to the application database?"
The answer to that question is the exact same answer to the question you are asking. While there is slight curation of code on Connect, I cannot imagine anyone other than a non-technical store owner being able to justify admin-panel-based downloads as viable.
Always, always, always do a code review and a load test.
In addition to being able to download via CLI, there are a few sites out there which allow to direct download the free extensions from Connect. http://freegento.com/ddl-magento-extension.php is one of them.
