• As an attempt to harden all my WordPress installs I’m installing Wordfence plugin to all of them. I’ve got them all up and running.

    But you’re told to add a line to the php.ini as soon as the plugin is installed.

    here are some of them as examples:

    auto_prepend_file = ‘/home/sitename1/public_html/wordfence-waf.php’
    auto_prepend_file = ‘/home/sitename2/public_html/wordfence-waf.php’
    auto_prepend_file = ‘/home/sitename3/public_html/wordfence-waf.php’
    auto_prepend_file = ‘/home/sitename4/public_html/wordfence-waf.php’
    etc.

    I am trying to add these lines to my global php.ini rather than creating and then adding a line in the php.ini to all the sites’ roots.

    according to this documentation https://docs.wordfence.com/en/Web_Application_Firewall_Setup?utm_source=plugin&utm_medium=pluginUI&utm_campaign=docsIcon scroll down

    When using a single php.ini on servers with multiple sites, you have to use this:

    [HOST=host1.example.com]
    auto_prepend_file = ‘/path/to/site/wordfence-waf.php’

    or this:

    [PATH=/path/to/site/]
    auto_prepend_file = ‘/path/to/site/wordfence-waf.php’

    have you any idea which one I use, the HOST or PATH one?

    And if so, which is the HOST or PATH I should use?

The topic ‘Wordfence global php.ini entry’ is closed to new replies.