Reads this site's owner token, minting one the first time.
WHY A SECOND SECRET RATHER THAN REUSING PW_DIAGNOSTICS. Getting your data out required
PW_DIAGNOSTICS=1, and that flag is one boolean over a set that also contains /sql (arbitrary
SQL against the site database), /restore (a whole-database overwrite) and /php. So the
supported way to leave was to expose a remote shell to the internet first. Export is an OWNER
operation, not a diagnostic, and it needs a credential rather than a mode.
Same mint and same storage as ensureHashSalt: per site, persisted, never in the payload.
Reads this site's owner token, minting one the first time.
WHY A SECOND SECRET RATHER THAN REUSING
PW_DIAGNOSTICS. Getting your data out requiredPW_DIAGNOSTICS=1, and that flag is one boolean over a set that also contains/sql(arbitrary SQL against the site database),/restore(a whole-database overwrite) and/php. So the supported way to leave was to expose a remote shell to the internet first. Export is an OWNER operation, not a diagnostic, and it needs a credential rather than a mode.Same mint and same storage as ensureHashSalt: per site, persisted, never in the payload.