Defining the Setting's allowed entries
With the Schema Settings module, you can retrieve the settings from the site (stored in table wp_options
), by querying field option
:
{
option(name: "home")
}
For security reasons, which options can be queried must be explicitly configured.
By default, only the following options can be queried:
"home"
"blogname"
"blogdescription"
Configuring the allowed options permalink
In the "Schema Settings" tab from the Settings, we must configure the list of options that can be queried via option
.
Each entry can either be:
- A regex (regular expression), if it's surrounded by
/
, or - The full option name, otherwise
For instance, both entries siteurl
and /site.*/
match option name "siteurl"
.
There are 2 behaviors, "Allow access" and "Deny access":
ππ½ Allow access: only the configured entries can be accessed, and no other can
ππ½ Deny access: the configured entries cannot be accessed, all other entries can