| FazBrowse GitHub Viewer | Trending | | Home |
| Tools: [Download Repo ZIP] [Original HTTPS Page] |
| Name | Name | Last commit date | ||
|---|---|---|---|---|
This is a fork of multisite-json-api plugin. URL: https://github.com/dostu/multisite-json-api
This is a Wordpress Plugin that adds JSON endpoints for creating, listing, and deleting sites on multisite.
This plugin aims to be simple to make Wordpress polyglot environments not only possible, but practical. I'm not the best at PHP, ruby and Go are more my thing, hence why I'm making this API. Contributions are greatly appreciated.
Make sure you limit access to the enpoints! You should not allow any yahoo off the internet to scan your site and look for these endpoints. I highly recommend some sort of .htaccess or nginx configuration settings to deny access to all but the local addresses you use for the API clients.
Something like this maybe:
Apache:
<Location /srv/wordpress/wp-content/plugins/multisite-json-api/endpoints> DenyFrom All AllowFrom 127.0.0.0/24 10.0.0.0/8 </Location>
Nginx:
location /wp-content/plugins/multisite-json-api/endpoints {
deny all;
allow 127.0.0.0/24 10.0.0.0/8;
}
Also, as of right now all user names and password are passed through http Headers. That means SSL is pretty much mandatory.
All of the enpoints require you to authenticate with an existing wordpress user. Currently all require the superadmin role, but that may change.
Username and password are passed with the HTTP Headers User and Password respectively. These are plain text so you need to be using SSL (which you are doing already right?).
Used the great Wordpress boiler plate template to get this thing off the ground.
Same as WordPress GPLv2.
| Back | FazBrowse Home | New Git URL |