Yes it is unsafe, though not for the reasons you think. DO NOT DO THIS.
If your developers can upload a PHP file to your site that gets executed, then that PHP file can undo all other security measures that you put in place. The location of the file is irrelevant. Functionally, there is no difference from editing plugins directly.
Additionally, a common security enhancement is to prevent PHP execution in the uploads folder, and assume any PHP in the uploads folder is malicious.
Either way, your proposed development process is highly unusual and problematic. I strongly advise against this. Moving the files uploaded to another folder will not improve security.
Do not let developers upload PHP to the uploads folder. It is not a good idea.
Related Posts:
- How do I get around “Sorry, this file type is not permitted for security reasons”?
- How to change upload directory in wp_handle_upload
- Uploading media with the REST API
- esc_attr() right way and use
- Enforcing password complexity
- Decrease file size upload in Media
- Does My Child-Theme Functions.php Need if{die} Security In It? [duplicate]
- Adding a custom image upload size and making it selected by default?
- Change the filename format of saved featured images
- Image Upload “exceeds the maximum upload size for this site”, but php.ini is correct
- How to register images uploaded via FTP in media library?
- How Attackers write script into my php files?
- Failed media upload: “The uploaded file was only partially uploaded.”
- Create Image Uploader for Widget
- Using file_exists to check file in Uploads
- Rename image uploads replacing “width” and “height” in filename with “medium”, “large”, “small”
- Rename image uploads with width in filename
- Renaming wp-content folder dynamically
- Modify image while uploading
- How do I create a WP user outside of WordPress and auto login?
- Debugging upload problem: What part of WP does actual image-resizing?
- Security – Ajax and Nonce use [closed]
- How to resize image on client-side before upload?
- Specified file failed upload test. wp_upload_handle
- How to upload imagick resource to media in wordpress
- Can I write ‘RewriteCond’ using ‘functions.php’?
- Accessing a random image via ajax
- Make WordPress upload directory outside wordpress root with custom url
- Upload images and attachments from frontend form
- Image upload via FTP to wordpress media library
- WordPress media upload “HTTP error”
- Adding featured image via PHP
- How to enlarge the media file upload size in wordpress admin
- Restrict WordPress File Type Uploads by User Type
- Sanitize get_query_var() url parameters
- File upload, uploads only file name
- Modify Maximum upload file size text
- Attach previously uploaded image to post – current code has unexpected results
- Change WordPress Upload Folder using wp handle upload
- Security: blocking direct access of php files
- How do I Import / Upload Files with jQuery AJAX?
- WordPress automatically adds links to uploaded images
- WordPress function when file is uploaded, deleted or edited
- Correct and safe way to include php content in my page
- Can I get an email notification when media is uploaded to the media library?
- Password minimum length in personal subscription [closed]
- How to add API security keys into JS of wordpress securely
- Is it best to avoid using $wpdb for security issues?
- Hardening uploads folder in IIS breaks images
- Blob file download problem
- zip unzip attachments in wordpress
- Troll the hackers by redirecting them
- Security updates to 3.3.2
- how to prevent wordpress admin from logging in via woocommerce my-account page
- Upload multiple files in randomly generated folder using wp_upload_bits
- malware undetectable by multiple scans
- Decoded malware code [closed]
- Can’t upload CSV file to plugin directory using custom upload form in admin panel
- WordPress upload file size error even after raising php limits
- Get uploaded image and attach it to the new post
- Get featured image with custom size outside WordPress
- Why is my max_upload_filesize being limited to 2M? [duplicate]
- Images Uploaded saving onto older/previous year folders
- How do I increase the upload size only when editing special pages?
- Convert canvas to image and upload image to server
- How to get the filename from file system and create a download link?
- Get URL of Featured Image After wp_insert_post()
- Custom upload folder
- WordPress İmages Upload & Delete Error
- Allow user to Upload image and manipulate it on the frontend
- custom plugin with upload files does not work
- Updating From Mobile App – Exposing Site to Hacking
- How to Make Thumbnail of Post Stay Animated
- Front end file upload returning wrong attachment url
- Convert all uploaded PNG files to PNG-8 format
- How to decrease the max file upload size without using php.ini or htaccess?
- security concerns if using html data-* attribute for l10n?
- Some problems in custom widget
- Checking page before applying image restrictions while uploading
- Change image data durgin upload
- Hook on file upload
- How to correctly escape an echo
- Reject all malicious URL requests functions.php
- Problem with inserting multiple images in gallery of each WooCommerce product programmatically
- I can’t set image ad fatured programatically
- portfolio site – about this site section – is it safe to post some code
- How can I update WordPress plugins or WordPress itself in all server?
- async upload not working when not logged
- echo cutom css code to WordPress page template file ? is this safe?
- WordPress loading all local images from specific directory?
- Trying to generate a CSS file in wordpress uploads folder
- How to secure my php forms
- $.ajax results in 403 forbidden
- Maximum file Upload
- Site infected by link
- Sudden Upload HTTP errors, PHP uploads and memory limits are already to high to my taste. Anything else?
- Change upload URL by mime type
- Access WP files on “server 1”, from “server 2” – using wp-load on an external website
- Deny php execution in /wp-includes – using .htaccess in /wp-includes VS root folder
- Right path for renaming a file in uploads folder