gladsong

Hi,

Thanks for considering it.

fwiw, I composer-install WP via bedrock

bedrock includes dotenv support,

https://github.com/roots/bedrock/blob/master/composer.json#L36

localized config, using .env, is in '(wp)/config/application.php'

e.g.

application.php
...
+ Config::define('cfturnstile_key', env('CF_TURNSTILE_SITEKEY'));
+ Config::define('cfturnstile_secret', env('CF_TURNSTILE_SECRETKEY'));
...

.env
...
+ CF_TURNSTILE_SITEKEY='0x4...'
+ CF_TURNSTILE_SECRETKEY='0x4...'
...

composer here isn’t responsible for the update attempts or the notifications.
it’s WP that’s ignoring the WP settings to stop updates.

Hi,

I’m not just trying to cehck the validity, I’m trying to generate the password according to my criteria, and have WP use it. For example when manually clicking on the “generate password” , or when the password field is auto-populated with a generated password.

And, yep. I’ve looked at the code of every plugin I can get my hands on. Including iThemes. Huge overkill, and as far as I can tell they rip out the core stuff, and do lots their own way

So, yes, I want several components to use ‘my’ intended password. I just need to understand how to NOT have other components use it, like that resetlink I mentioned above.