[wp-trac] [WordPress Trac] #9444: Allow to read wp-config.php without loading WP

[WordPress Trac]

#9444: Allow to read wp-config.php without loading WP
--------------------------------------------------+----------------------
 Reporter:  hakre                                 |       Owner:
     Type:  defect (bug)                          |      Status:  closed
 Priority:  normal                                |   Milestone:
Component:  General                               |     Version:  2.7.1
 Severity:  normal                                |  Resolution:  wontfix
 Keywords:  has-patch tested commit dev-feedback  |     Focuses:
--------------------------------------------------+----------------------

Comment (by jasonhendriks):

 Replying to [comment:26 rpayne7264]:
 > The part of oAuth where I need to maintain state between the token
 request and the authentication request.

 And you've already stated you can't use store state in the http session.
 But it isn't an alternative as simple as storing the state in the
 database? Let's say it's Google we're dealing with..

 -> User makes permission request to Google. WordPress loads.
 .... store 'authenticating mode flag' in db
 .... store unique Google state code in db
 .... redirect to Google
 -> Google redirects back to us. WordPress loads.
 .... remove 'authenticating mode flag' from db
 .... remove and verify unique Google state code from db
 .... retrieve code from http request
 .... ask Google to exchange code for auth token
 .... store token in DB

 WordPress is already running each time we require a load/save of state..
 no?

--
Ticket URL: <https://core.trac.wordpress.org/ticket/9444#comment:27>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform