[wp-trac] Re: [WordPress Trac] #8927: allow turning off 'calling home' even _before_ install

WordPress Trac wp-trac at lists.automattic.com
Tue Feb 24 04:02:18 GMT 2009

#8927: allow turning off 'calling home' even _before_ install
 Reporter:  jidanni                               |        Owner:  jacobsantos
     Type:  enhancement                           |       Status:  closed     
 Priority:  lowest                                |    Milestone:  2.8        
Component:  HTTP                                  |      Version:  2.7        
 Severity:  trivial                               |   Resolution:  fixed      
 Keywords:  dev-feedback has-patch needs-testing  |  

Comment(by jidanni):

 Looks good. OK, I see you all have taken the "lock the liquor store" (seal
 off HTTP access) approach. However that still leaves plenty of
 teenagers (processes that wish to use HTTP) roving around outside
 hoping for access... but I suppose that's how society is.

 But wait, my "gold standard test" is: starting from a vanilla install,
 all the way even including browsing the dashboard (currently (2.7.1)
 booby trapped to download RSS even before you can reach for "screen
 options"), can I avoid one single download?
 * You block external URL requests by defining WP_HTTP_BLOCK_EXTERNAL
 * in your wp-config.php file  and this will only allow localhost and
 * your blog to make requests.
 Sorry I'm still using 2.7.1, but looking at the new code,
 aren't "localhost and my blog" the ones making those RSS etc.
 requests on the Dashboard?

 By the way,
 * The constant WP_ACCESSABLE_HOSTS will allow additional hosts to go
 through for requests.
 that would be good for 'Block many, but let through a few', but I'm afraid
 you need one further variable for those who wish to 'Block a few, but let
 through many'.

Ticket URL: <http://core.trac.wordpress.org/ticket/8927#comment:14>
WordPress Trac <http://trac.wordpress.org/>
WordPress blogging software

More information about the wp-trac mailing list