WordPress base configuration files on GitHub

Re:WordPress base configuration files on GitHub by z92 on Monday August 17, 2015 @09:52AM (#10072935)

Which is why I don't use any database password if the database is listening on localhost only, which is the case most of the time.

[ Parent | on HN ]

Re:WordPress base configuration files on GitHub by cubehouse on Monday August 17, 2015 @10:06AM (#10073016)

I don't think this is a good idea, even if the database is just listening to localhost. Say a malicious script gets uploaded to the machine, it will be able to dump the entire database without any need to seek out credentials.

[ Parent | on HN ]

Re:WordPress base configuration files on GitHub by degenerate on Monday August 17, 2015 @10:13AM (#10073056)

Agree... it's better to still have credentials, but ALSO only listen locally. At least that way the credentials need to be found first!

[ Parent | on HN ]