Don't show bakery key in admin ui

Created on 31 January 2014, over 11 years ago
Updated 15 May 2025, 28 days ago

The bakery key should be set in settings.php (or somewhere similar) and then not shown/configurable on the admin screens. Showing it allows someone who gains access to a subsite to be able to break into a master site as any user they want to be.

📌 Task
Status

Active

Version

3.0

Component

Code

Created by

🇺🇸United States greggles Denver, Colorado, USA

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

Production build 0.71.5 2024