Comments (3)
Hi!
The out-of-the-box WordPress wp-config includes:
/**#@+
* Authentication unique keys and salts.
*
* Change these to different unique phrases! You can generate these using
* the {@link https://api.wordpress.org/secret-key/1.1/salt/ WordPress.org secret-key service}.
*
* You can change these at any point in time to invalidate all existing cookies.
* This will force all users to have to log in again.
*
* @since 2.6.0
*/
define( 'AUTH_KEY', 'put your unique phrase here' );
define( 'SECURE_AUTH_KEY', 'put your unique phrase here' );
define( 'LOGGED_IN_KEY', 'put your unique phrase here' );
define( 'NONCE_KEY', 'put your unique phrase here' );
define( 'AUTH_SALT', 'put your unique phrase here' );
define( 'SECURE_AUTH_SALT', 'put your unique phrase here' );
define( 'LOGGED_IN_SALT', 'put your unique phrase here' );
define( 'NONCE_SALT', 'put your unique phrase here' );
/**#@-*/
Part of the standard procedure of bootstrapping a new WP instance is updating these phrases, optionally by using the tool provided.
I cannot speak on Microsoft's behalf, but suspect that maintaining this procedure is intentional.
from wordpress-linux-appservice.
@tersor, thanks for letting us know. We will add this by default.
WordPress uses a built-in random generator to create these keys and salts when they are not explicitly defined in the wp-config file. However, it's a good practice to define your own unique keys and salts manually. This way, you will have greater control over the security of your WordPress site.
You can run the below command on your from SSH console to generate the keys.
wp config shuffle-salts --path=/home/site/wwwroot --allow-root
from wordpress-linux-appservice.
We will add this by default.
Great, a much welcome addition considering not everybody will do the manual lifting as described above as a part of the post installation process.
from wordpress-linux-appservice.
Related Issues (20)
- Errors in Azure Email Logs - emails not getting sent HOT 4
- Terraform: An argument named "docker_image_name" is not expected here. HOT 1
- Startup script lacks permissions to modify nginx config files HOT 3
- [REOPEN] Images not displayed in editor #96 HOT 2
- Image uploads returning the wrong URL HOT 1
- unable to load ldap extension HOT 3
- [email protected] not working HOT 2
- Unable to convert to multisite. HOT 4
- Intl: is not installed, or has been disabled. HOT 5
- Export frozen @ 20% with no error HOT 2
- HSTS Preloading Should Be Opt-In
- Wordpress on Azure appservice email integration plugin missing HOT 8
- Startup Command Field HOT 3
- CUSTOM_DOMAIN not working correctly HOT 7
- Azure Communication Services Sending File Attachments HOT 8
- Downtime for updated images HOT 1
- Outdated PHP
- Enable / Disable phpmyadmin
- Application Insights for WordPress
- Question: Production & Staging Swap
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from wordpress-linux-appservice.