roots/wp-blade-check

Simple Composer package that checks and displays an admin notice if your uncompiled Blade templates are publicly accessible.

v1.0.0 2019-03-26 08:42 UTC

Requires

• php: >=7.1

MIT

• Brandon Nifong

• security
• wordpress
• blade
• roots
• sage

README

WP Blade Check is a simple Composer package that checks and displays an admin notice if your uncompiled Blade templates are publicly accessible. This is a sign of an improperly configured webserver, and for the privacy of your codebase, should be handled accordingly. If you are using Trellis and/or Kinsta, this is already done for you.

Installation

Install via Composer:

$ composer require roots/wp-blade-check

Configuration

No configuration is needed, but you can pass a few optional settings through the roots.blade.check filter such as permanently hiding the notice or adding more file extensions to check against such as .twig.

add_filter('roots.blade.check', function () {
    return [
        'hide'       => false, // Setting to true will permanently hide the notice.
        'duration'   => 60 * 60 * 24, // Duration between checking against the extensions.
        'extensions' => ['blade.php', 'twig'] // An array or string containing the extensions to check against.
    ];
});

Contributing

Contributions are welcome from everyone. We have contributing guidelines to help you get started.

Community

Keep track of development and community news.

• Participate on the Roots Discourse
• Follow @rootswp on Twitter
• Read and subscribe to the Roots Blog
• Subscribe to the Roots Newsletter
• Listen to the Roots Radio podcast