Security risks in adding disallow file mods to production websites

2 posts were merged into an existing topic: Allow adding plugins in Wordpress when WP_ENV is set to production. Is this possible?