However, people are sometimes unsure of how to use this feature. In other words, you can manage several different WordPress websites from a single dashboard. WordPress Multisite is a popular feature of WordPress, which enables you to create and run multiple websites using the same WordPress installation on your server. From setting up Wordpress Multisite to optimizing its various features, this article will help you understand every facet of this unique WordPress tool. In the end, it is like using the VirtualHost feature of Apache, there is always a risk that a hacker getting unauthorized access to one website, gets access to other websites on the same server.WordPress Multisite allows you to run multiple websites on your server using the same WordPress installation. To avoid people finding other websites on your multisite installation, I would recommend checking after each update if there is no leak. But if your username is not added to the website, you will not see other websites.Īn advantage of using multisite is that you will not have WordPress core files duplicated for several websites. If you successfully log in to a website with the username only used on another website or both websites, it will disclose the other website URL in the menu My Sites. It is also recommended to disable directory listing on your web server, otherwise people will see all the files of other websites in your uploads directory (this does not prevent people from guessing and finding uploaded files of other websites). However BuddyPress will display users of other websites even if you did not add them to your website (if they tried to log in on your website), when visiting the URL /members. I had to configure the password reset link to stop leaking the primary website, see Password Reset for Users on a Multisite Subsite.Īlso I used the plugin WP Mail SMTP to configure the From email address of the default PHP mailer to use the website domain name because it was leaking the primary website domain name.Īnd when using BuddyPress, I had to uncheck the option "Show the Toolbar for logged out users" because the WordPress logo was leaking the primary website URL. However the users of a website are not used on another website (except the administrator) unless you use the feature "Add Existing User", so it is not possible to know users of other websites by using a URL like /author/username.īy default, WordPress leaks other websites which is not good for privacy I think. I don't know if there is a way to have fully separate users (where you can create a new user with a username already taken on another website) but it is possible to not reveal other websites to your users. You have a problem "How do I spin up WP installs quickly so I can resell them", but rather than ask that question, you devised a solution and asked how to implement the solution instead Better yet, use WP docker images and provision them automatically. Or you could write a script that lists WP instances and lets you download and install new ones. Longer for the average developer, with no guarantee it will work well. I estimate at least a months worth of work from an experienced developer, with an extended maintenance contract. Every user related API would need modifying.A lot of additional code would need writing to setup new users etc, and create the existing tables with the new prefixes.Any plugin that uses switch_to_blog could cause data corruption, including navigation in the network admin.The Network admin user panel would be useless if not broken. The entire setup would require ongoing updates and maintenance to fix issues.Any plugins or themes that do anything remotely related to multisite will reveal the truth, unavoidably. Network admin roles and capabilities will be broken.now the only benefit is that creating sites is easier.Keep in mind if you did manage this though, it would be trivial for them to find out it was a multisite based on code, and they could very easily break out of their site.Īs an aside, you could run filters to strip out everything that makes multisite multisite, and make the user tables separate, but: No, in a multisite, all sites have the same users table and user meta.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |