admin管理员组文章数量:1289565
My friend has a Wordpress site, I have a django server. I am trying to talk to his Wordpress site custom endpoints of the REST API, and do priviledged activities like create and unpublish posts. I am making a plugin for him.
My friends wordpress hosting has the following structure:
public_html
- wp-admin
- wp-content
- plugins
- My-Shiny-New-REST-Plugin
- secret.php
- wp-includes
In order for the Wordpress REST API and my server to talk together, I wish for them to both have copies of a secret key. On the wordpress site it will be stored in secret.php
above. Now what concerns me, as far as I can see is that php code seems to be public (django python code is private). And I imagine secret.php is not very secret at all.
How does one store a secret token for ones plugin in a secure way?
本文标签: How to store a secret for a plugin inside publichtml
版权声明:本文标题:How to store a secret for a plugin inside public_html 内容由网友自发贡献,该文观点仅代表作者本人, 转载请联系作者并注明出处:http://www.betaflare.com/web/1741451822a2379528.html, 本站仅提供信息存储空间服务,不拥有所有权,不承担相关法律责任。如发现本站有涉嫌抄袭侵权/违法违规的内容,一经查实,本站将立刻删除。
发表评论