sevenspark said
Sounds like an awesome improvement, Japh!I have two concerns:
1. Does the plugin do a writability check on the /wp-content/ directory, and explain to the user how to change permissions if necessary?
2. Does the plugin do anything to “lock down” the directory from non-admin, logged-in users? In other words, only the site admin should be able to access/download the zip. Otherwise, anyone who knows the directory structure could go around to WordPress sites with known ThemeForest themes and download theme “backups” for free, depending on how the user has their server configured (unless I’m missing something). I’ve seen this happen too many times where customers have placed plugin or theme zips in some random folder on their server that is publicly accessible. Standardizing that location could be an issue.
Just some food for thought, sounds like a great addition
Chris
Thanks, Chris!
To answer your questions:
- Yes it does, however if you notice any problems please let us know ASAP
- Yes it does! The plugin locks down the
envato-backupsdirectory with an internally generated key that’s unique per installation
The plugin is open source, so feel free to take a look at our implementation, and if you see room for improvement let us know 

