41–50 of 90 posts
Earlier quoted context omitted.
Excluding localhost and some obvious cases where the values are in a local config file still leaves around 111,000: https://github.com/search?p=1&q=filename%3Awp-config.php+DB_...
localhost in the case of Wordpress just means the database is running on the same machine as the web server. Practically every WP instance is set up that way.
Uh, the concept of localhost is not unique to Wordpress in the slightest.
You do know that you can play the same game with other languages as well? https://github.com/search?utf8=%E2%9C%93&q=filename%3Asettin... I feel like people don't accept the fact that people do stupid stuff in other languages.
I think you're being oversensitive about PHP. Wordpress, and by extension, its predictably-named settings file, is an easy search-target because it's very popular among novice/new developers.
Github search is an untapped resource just like Algolia Search is on Hackernews. Infact I have largely replaced my Google searches with these ones for more refined and curated results.
At what point do developers get criticized/held responsible for using public repositories for private websites? I get it, people like github but when you can get a private repo on bitbucket for free there's no excuse for this.
At what point do developers get criticized/held responsible for using public repositories for private websites? I get it, people like github but when you can get a private repo on bitbucket for free there's no excuse for this.
Absolutely, Github public repos have always been a blackhat gold mine. But I guess a lot of people have never heard of Bitbucket, since Github is advertised everywhere , on education blogs, books , ... I'm sure some noobs using it don't even realize repositories are public and searchable.
1500 Results on Google: https://www.google.com/search?q=%22define%28+%27DB_PASSWORD%...
Does anyone else get a CAPTCHA on the next search after browsing through those results?