WordPress

wget https://wordpress.org/latest.tar.gz
groupadd www
useradd www -s /sbin/nologin -g www -M  # M:no create home
chown -R www:www /home/www

define('DISABLE_WP_CRON', true);  // 提高效率
define('DISALLOW_FILE_EDIT', true);
vim wp-content/uploads/.htaccess
# <Files *.php>
# deny from all
# </Files>
vim .htaccess
# <Files xmlrpc.php>
# order deny,allow
# deny from all
# allow from 127.0.0.1
# </Files>

// Start Restrict API acess to localhost
function restrict_rest_api_to_localhost() {
    $whitelist = ['127.0.0.1', '::1'];

    if (!in_array($_SERVER['REMOTE_ADDR'], $whitelist)){
        //die( 'REST API is not available.' );
        new WP_Error('forbidden_access', 'Access denied', array('status' => 403));
    }
}
add_action('rest_api_init', 'restrict_rest_api_to_localhost', 0);

  define('JWT_AUTH_SECRET_KEY', 'your-top-secrect-key');
  define('JWT_AUTH_CORS_ENABLE', true);

add_filter('rest_url_prefix', function(){
  return 'wp-api';
});
# 未登陆用户禁止使用REST-API
add_filter('rest_authentication_errors', function($result) {
  if (!empty($result)) {
    return $result;
  }
  $whitelist = [
    '/api/jwt-auth/v1/token'
  ];
  if (in_array($_SERVER['REQUEST_URI'], $whitelist)) {
    return true;
  }
  if (!is_user_logged_in()) {
    return new WP_Error('rest_not_logged_in', 'You are not currently logged in.', array('status' => 401));
  }
  return $result;
});

create table `wp_users` (
  `ID` bigint(20) unsigned not null auto_increment,  -- 用户id
  `user_login` varchar(60) not null default '',  -- 用户登录名称
  `user_pass` varchar(255) not null default '',  -- 用户登录密码
  `user_nicename` varchar(50) not null default '',  -- 用户昵称,默认 == user_login
  `user_email `varchar(100) not null default '',
  `user_url` varchar(100) not null default '',
  `user_registered` datetime not null default '0000-00-00 00:00:00',  -- 用户注册时间
  `user_activation_key` varchar(255) not null default '',  -- 用户激活码.重设密码时会使用来对比.
  `user_status` int(11) not null default '0',  -- 用户状态
  `display_name` varchar(250) not null default '',  -- 用户显示名称
  primary key (`ID`),
  key `user_login_key` (`user_login`),
  key `user_nicename` (`user_nicename`),
  key `user_email` (`user_email`)
) engine=InnoDB auto_increment=9 default charset=utf8mb4 collate=utf8mb4_unicode_ci;

create table `wp_posts` (
  `ID` bigint(20) unsigned not null auto_increment,
  `post_author` bigint(20) unsigned not null default '0',  -- 作者uid
  `post_date` datetime not null default '0000-00-00 00:00:00',
  `post_date_gmt` datetime not null default '0000-00-00 00:00:00',
  `post_content` longtext not null,
  `post_title` text not null,
  `post_excerpt` text not null,  -- 摘录
  `post_status` varchar(20) not null default 'publish',  -- auto-draft inherit
  `comment_status` varchar(20) not null default 'open',  -- closed. 评论状态
  `ping_status` varchar(20) not null default 'open',
  `post_password` varchar(255) not null default '',  -- 文章密码
  `post_name` varchar(200) not null default '',  -- 文章缩略名
  `to_ping` text not null,
  `pinged` text not null,
  `post_modified` datetime not null default '0000-00-00 00:00:00',  -- 修改时间
  `post_modified_gmt` datetime not null default '0000-00-00 00:00:00',
  `post_content_filtered` longtext not null,
  `post_parent` bigint(20) not null default '0',
  `guid` varchar(255) not null default '',
  `menu_order` int(11) not null default '0',
  `post_type` varchar(20) not null default 'post',  -- 文章类型: page
  `post_mime_type` varchar(100) not null default '',
  `comment_count` bigint(20) not null default '0',
  primary key (`ID`),
  key `post_name` (`post_name`(191)),
  key `type_status_date` (`post_type`,`post_status`,`post_date`,`ID`),
  key `post_parent` (`post_parent`),
  key `post_author` (`post_author`)
) engine=InnoDB auto_increment=973 default charset=utf8mb4 collate=utf8mb4_unicode_ci;

create table `wp_comments` (
  `comment_ID` bigint(20) unsigned not null auto_increment,
  `comment_post_ID` bigint(20) unsigned not null default '0',  -- 对应文章id
  `comment_author` tinytext not null,  -- 评论者
  `comment_author_email` varchar(100) not null default '',  -- 评论者邮箱
  `comment_author_url` varchar(200) not null default '',
  `comment_author_IP` varchar(100) not null default '',
  `comment_date` datetime not null default '0000-00-00 00:00:00',
  `comment_date_gmt` datetime not null default '0000-00-00 00:00:00',
  `comment_content` text not null,
  `comment_karma` int(11) not null default '0',
  `comment_approved` varchar(20) not null default '1',  -- 评论是否被批准
  `comment_agent` varchar(255) not null default '',
  `comment_type` varchar(20) not null default 'comment',  -- pingback/普通
  `comment_parent` bigint(20) unsigned not null default '0',  -- 父评论id
  `user_id` bigint(20) unsigned not null default '0',  -- 评论者uid,未登录用户则为0
  primary key (`comment_ID`),
  key `comment_post_ID` (`comment_post_ID`),
  key `comment_approved_date_gmt` (`comment_approved`,`comment_date_gmt`),
  key `comment_date_gmt` (`comment_date_gmt`),
  key `comment_parent` (`comment_parent`),
  key `comment_author_email` (`comment_author_email`(10)),
  key `woo_idx_comment_type` (`comment_type`)
) engine=InnoDB auto_increment=6 default charset=utf8mb4 collate=utf8mb4_unicode_ci;