[wp-trac] [WordPress Trac] #47635: expand wp-config.php file with default settings
WordPress Trac
noreply at wordpress.org
Wed Jul 3 06:19:05 UTC 2019
#47635: expand wp-config.php file with default settings
-------------------------------+------------------------------
Reporter: tradik | Owner: (none)
Type: feature request | Status: new
Priority: normal | Milestone: Awaiting Review
Component: Bootstrap/Load | Version: trunk
Severity: normal | Resolution:
Keywords: reporter-feedback | Focuses:
-------------------------------+------------------------------
Comment (by knutsp):
Use cases:
1. Security, protection against extensions messing with things they should
not.
2. Agencies/developers setting up sites for clients with warranty and/or
support, and still letting the client be administrator to be able to
manage plugins, themes and other options than the above. Restricting the
above settings for admin is complicated.
These constants should ''not'' be introduced in `wp-config-sample.php` so
I suggest limiting this ticket to just let those constants have the
desired effect, like most other constants.
1. Make the controls in settings page be disabled.
2. Removed from accepted keys when posting to options.php.
3. Protect options from being filtered or saved through set_option.
I am fully aware this is not security from malicous code, as the database
is fully open to any extension. This is against unintended or clueless
messing up, like setting default role to Administrator and open
registration.
A `WP_SITE_LANGUAGE` should also be in. Deprecated `WP_LANG` was (is
still?) for adding new translations, or if not, it can be reintroduced to
lock the site language. Users have their own personal language setting.
--
Ticket URL: <https://core.trac.wordpress.org/ticket/47635#comment:3>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform
More information about the wp-trac
mailing list