search

tiredofit / docker-wordpress

Dockerized Content Management System many with customizable options
MIT License
36 stars 7 forks source link

Dynamic generation of username : admin and password : password for wp-admin #19

Open raghavan2004 opened 2 years ago

raghavan2004 commented 2 years ago

Description of the feature

Need implementation of creating a dymanically generated username and password for wp-login username and details. Benftits of feature

This will help in the cracking of the password, because admin will be displayed in the case of blog, ie who wrote the blog.. and the hacker must try only the password which is easy to find because we have given the 50% details .. I want it to be complicated for the hacker to find the wp login details of the username and the password Additional context

No screenshots available

tiredofit commented 2 years ago

You can use the ADMIN_USER environment variable, but I see where you are coming from - Regardless of what happens wordpress creates the default post and page and shows the author leaking the Admin user. I suggest this be something brought up with Wordpress developers.

An alternative way would be if you can figure out with wp-cli how to remove the page and post I can script it upon first install with an environment variable.