Plugins

Enable or disable plugins found on disk

RiskOps — Plugins RO-PLUG-20260919-1642 Kuruma Özel

Kuruma Özel

Plugins

Report date	19.09.2026 16:42	Document no	RO-PLUG-20260919-1642
Prepared by	RiskOps Administrator	System	RiskOps — IT & Cyber Risk Management

Installed plugins

1 found · 0 loaded

Plugin	Version	Status
Örnek: Risk Olay Günlüğü Eklenti sisteminin nasıl çalıştığını gösteren örnek. Menüye bir giriş ekler ve risk olaylarını ayrı bir günlük dosyasına yazar. `plugins/ornek-kayit-defteri/` · RiskOps	1.0.0	Disabled

Installing a plugin

Installing a plugin means trusting its author as much as the core.
A plugin is PHP code running with the application's own privileges: it can reach the database, write files and open network connections. PHP has no real sandbox, so no claim is made that it is confined.

Files CANNOT be uploaded from this screen, and that is deliberate: an upload endpoint would turn a single compromised admin account straight into remote code execution. Installation happens on the server:

cd /var/www/riskops/plugins
git clone <eklenti-adresi> eklenti-adi
# ya da: scp -r eklenti-adi sunucu:/var/www/riskops/plugins/

Once the files are in place the plugin appears in this list and can be enabled here. No write access to the code is needed; only the list of enabled plugins is stored in storage/plugins.json.

Available hooks

`risk.created`	Risk created (action) — $riskId, $data
`risk.updated`	Risk updated (action) — $riskId, $old, $new
`risk.deleted`	Risk deleted (action) — $riskId, $data
`nav.items`	Sidebar (filter) — the menu array
`reports.definitions`	Report registry (filter) — report definitions

Example plugin: plugins/ornek-kayit-defteri/ — it uses both an action and a filter hook, and explains each in comments.

RiskOps · Plugins · RO-PLUG-20260919-1642 · 19.09.2026 16:42

Bu rapor RiskOps tarafından otomatik üretilmiştir.

This document is classified Kuruma Özel. It must not be shared with unauthorised parties.