Security in a shared hosting environment?

Your best option is to use separate Redis processes for each customer, or use Redis 6’s ACLs to isolate each database on a single server.

Hi menathor,

Have you found a concrete way to solve this issue?
Do you mind to share your findings?

I just installed Redis and I’m testing it with this free “Redis Object Cache” plugin, but I found this post about the security Redis issue on a shared web hosting environment:

https://stackoverflow.com/questions/60477527/is-it-normal-that-i-see-others-redis-data-on-shared-hosting

Then, with Till’s answer, I found this article but not really getting it how to apply it:
https://redis.com/blog/getting-started-redis-6-access-control-lists-acls/

I’m concern because I have others people wp sites on my Linux CenOS server with LiteSpeed, ModSecurity and MySQL8, but I’m really a beginner on this Redis topic to understand clearly how to solve this security issue.

Thank you for any help,

@artevizual You need to create a separate ACL user for each site that only has access to that particular database.

Then use a config like this for each site:

define('WP_REDIS_PASSWORD', ['site-1', 'password']); // change for each site
define('WP_REDIS_DATABASE', 0); // change for each site