Skip to content

Conversation

@clobee
Copy link
Collaborator

@clobee clobee commented Sep 11, 2024

Main change concerns the use of "SECURE_AUTH_SALT"

@clobee clobee requested a review from jojobote September 11, 2024 12:02
@clobee clobee closed this Sep 12, 2024
Copy link
Collaborator

@jojobote jojobote left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Why do we want to check env variables for the just the salt and not vector too ? Good otherwise !

@clobee clobee reopened this Sep 13, 2024
@clobee
Copy link
Collaborator Author

clobee commented Sep 13, 2024

@jojobote I am now getting the Init Vector from the wp-config as well just like the the passphrase.
This makes it like a 2 factor authentication: Any attacker will need the wp-config.php and the database to a successful attack.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants