Table of Contents
Problem Description #
Attempting to download plugins or themes from the dashboard produces server-related errors (for example open_basedir restriction, permission denied, or blank downloads).
Common symptoms / messages:
- Errors referencing open_basedir or permissions.
- Download fails or results in empty ZIP.
- The plugin cannot create the temporary ZIP or stream it to the browser. WordPress.org
Cause:
Server restrictions (like open_basedir) or PHP configuration (disabled zip extension, disabled file functions, or insufficient filesystem permissions) can prevent the plugin from creating or serving ZIP archives.
Solution – step-by-step #
- Check server PHP error or webserver logs
- Reproduce the error, then inspect your server error logs or PHP error log for open_basedir or permission-related messages. This confirms server-level restrictions.
- Confirm PHP extensions & functions are available
- Ensure zip extension is installed and enabled. Also verify functions like realpath, fopen, file_get_contents, and zip-related functions are permitted. (Ask your host if you do not have server access.)
- Check open_basedir and paths
- If open_basedir is set, ensure WordPress and plugin temp paths are within allowed paths. Work with your host to add the needed directories to open_basedir allowlist.
- Confirm filesystem permissions
- Ensure webserver user (www-data, apache, nginx user) has read access to plugin and theme directories and write access to WP temp/ uploads directories if plugin writes temporary files.
- Try manual server fallback
- If server restrictions prevent on-the-fly zipping, use other methods as a fallback: SFTP to wp-content/plugins/ / wp-content/themes/ and create zips locally, or use wp plugin / wp theme WP-CLI commands to package. (Host/SSH access required.)
- Report to plugin support with logs
- If the plugin errors are not obviously server-restricted, provide a screenshot, the server/PHP error log entries, plugin version, and WordPress version in a support thread. Developers have responded to open_basedir reports in earlier support threads. WordPress.org
Prerequisites #
- Access to server/PHP logs or ability to contact host support.
- Knowledge of server user file permission model.
Additional notes / prevention #
- For managed hosts, verify allowed PHP functions and open_basedir settings before enabling archive-generation plugins.
- Keep a documented process for hosting teams to add paths to open_basedir if needed.
