how can i make uploading plugin process secure
<p>lets take the word press example
now when you want to add new plugin
you have to upload the plugin file (php file)
in that case, may some one evil
know your admin password and go to and upload a plugin
but not realy plugin
its evil code to hack your site</p>

<p>may we use function <a href="http://www.awcore.com/php/snippets/139/validating-files-source-or-content_en" rel="nofollow">like this</a> to check the content , but i know know , may the other plugins contand the same code? or i can dsable some functions in it?</p>
