How secure would the server that magento runs in be if someone was to have access to the magento admin panel.

Is there a way through extensions installed or similar techniques to install malware on the server?

Is it a good idea to trust a freelancer with the admin panel login info to make any installs or adjustments?

closed as primarily opinion-based by Rakesh Jesadiya, 7ochem, Khoa TruongDinh, Siarhey Uchukhlebau, Murtuza Zabuawala Jan 10 '17 at 12:51

Many good questions generate some degree of opinion based on expert experience, but answers to this question will tend to be almost entirely based on opinions, rather than facts, references, or specific expertise. If this question can be reworded to fit the rules in the help center, please edit the question.

  • You can always do things yourself if you don't trust said freelancer. I don't know what your contract is with them, but things should be pretty clear for your safety. – Julien Lachal Jan 10 '17 at 8:56
  • The thing is, I trust them but not enough to give them ssh access to the server but good enough to have access to the magento site. The thing I am worried the most is if they manage to install with any of the magento extensions and php plugins some malware – Iordanis Jan 10 '17 at 8:59
  • Better do a screen share and you can still see what the freelancer is doing. – Sukeshini Jan 10 '17 at 9:02

If you hire a freelancer then you have to trust them. But if you have any doubt on them then you can create a admin user for limited access and give that access to them.

So you will feel secure.

  • ok so you can create temporary admin user for freelancers with limited access – Ronak Chauhan Jan 10 '17 at 9:15

Not the answer you're looking for? Browse other questions tagged or ask your own question.