How does Install Pro for me work?

Install Pro for me is for anyone who has never uploaded a plugin. It is the first way under Install Pro on Settings → Connect your website → Site connector, for a WordPress site that runs the free SEOmise Connector. Laravel and PHP sites need no Pro: their connector does everything already.

The four steps

1. Approve on your site. Read what will happen, tick I agree and press Install Pro for me. A tab opens on your own WordPress, on its page Authorize Application (WordPress's own approval page). Sign in there as usual, two-step sign-in included, and press Approve. SEOmise is not involved in your sign-in and never sees your password.
2. The free connector is on the site. It is already there and connected, so this step is ticked straight away.
3. Pro installed and switched on. SEOmise sends the connector on your site one signed command. The connector downloads Pro from SEOmise through an address that works once and only for a short time, checks the file's checksum and SEOmise's signature, installs it with WordPress's own installer and switches it on. SEOmise then asks your site whether Pro runs.
4. Access closed. As soon as Pro answers (or if something fails), SEOmise removes the access WordPress gave it from your site and deletes its own copy. The screen says Access closed.

The SEOmise tab shows the four steps with ticks while it works. When Pro runs you also get an e-mail and a notice in the bell.

What is checked

• Only someone who manages the project's data can press it, signed in to SEOmise with two-step sign-in, and never while SEOmise staff view your account.
• Your approval counts for this one install. The connector accepts the install only while that job is open, only with its job number, and only from SEOmise's key it got when it was connected. The same command cannot be sent twice.
• Pro comes only from SEOmise's own download address for your site. The connector refuses it unless the checksum and SEOmise's signature match, and puts it only in the plugin folder seomise-connector-pro.
• WordPress lists the access as SEOmise Install Pro under Users → Profile → Application Passwords while the job runs, and it is gone afterwards. SEOmise keeps it encrypted only for those minutes. The activity log records the job, never the access itself.
• A job not finished within 30 minutes (by default) is stopped and its access closed by itself.

When it cannot run

The way says why and the other ways stay open:

• Application passwords switched off on your site (some security plugins and hosts do this): WordPress cannot show its approval page. Use Myself, Send to my developer or Over SSH or SFTP.
• The connector from WordPress.org: WordPress.org does not let a plugin it lists install code from elsewhere, so that copy leaves this out. The other ways work.
• WordPress asks for FTP details to install plugins on your host, or plugin installs are switched off in wp-config.php (DISALLOW_FILE_MODS).
• You pressed No on WordPress's page: nothing changed on your site. Press Try again or choose another way.

A project can start up to 5 installs a day (SEOmise may set other limits). Stop ends a job that is still waiting for your approval.