# Allow adding plugins in Wordpress when WP_ENV is set to production. Is this possible?

**URL:** https://discourse.roots.io/t/allow-adding-plugins-in-wordpress-when-wp-env-is-set-to-production-is-this-possible/21124
**Category:** bedrock
**Created:** 2021-07-14T13:43:14Z
**Posts:** 5

## Post 1 by @emm — 2021-07-14T13:43:14Z

Is there a way to allow admin users to add plugins in a Wordpress admin dashboard even when the WP\_ENV variable in the .env file is set as production?

---

## Post 2 by @ben — 2021-07-14T23:40:51Z

Yes, if you define `DISALLOW_FILE_MODS` and set it to `false` for production in the config, you’ll be able to install plugins from the wp-admin

---

## Post 3 by @emm — 2021-07-15T07:36:54Z

Thanks @ben! Do I add this into the production.php file in the config directory of my website? Also, is there any security risks or any risk at all in doing this to a production website?

---

## Post 4 by @emm — 2021-07-16T11:24:47Z

I need to define `DISALLOW_FILE_MODS` and set it to `false` for production in the config to allow admins to be able to install plugins from the wp-admin.

Are there any security risks or any risk at all in doing this to a production website? Is it no advised to do so?

---

## Post 5 by @alwaysblank — 2021-07-16T15:13:28Z

Allowing people to upload code that will be executed by your site is a pretty clear security risk.

In the context of bedrock, changing that setting will also prevent bedrock from being able to accurately track what plugins you have installed, since plugins installed/updated via the admin won’t modify the `composer.json`. That’s one of the primary purposes of bedrock, so if you’re going to disable it you’re working and cross-purposes with the stack.

---

## Post 6 by @system — 2021-08-25T13:43:18Z

This topic was automatically closed after 42 days. New replies are no longer allowed.