Skip to content

Is there any way to not expose ENV, SERVER via phpinfo but keep getenv functionality in wp-config? #963

@maltris

Description

@maltris

Old topic, but I found that the WORDPRESS_* envvars are still exposed via phpinfo. This can be fixed by setting clear_env in the fpm pool config, but I think this breaks the getent workings of wp-config-docker.php. Is there a way to rework this?

Personally I dont have a problem with separated stacks and no web-exposed phpinfo nor MySQL DB. However there are people who forget their info.php and actually use a web-exposed MySQL server, which puts their whole site at risk.

Maybe I am missing something, please enlighten me.

Best regards

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions