Revisr - Git for WordPress

You’ve got to be extremely careful keeping your .git folder (repo) on live hosting such as would be the case if you were using Revisr. Especially so in the case of using Revisr with remote repository settings stored which makes it trivial to access http://example.com/.git/config providing you with the username and password of your remote repo if you saved your remote with https://username:password@bitbucket.org/myuser/myrepo.git

There are a good number of real problems that can occur when you keep a .git folder in public space but if it’s necessary to do so it’s always good to in some way or another protect that directory which Revisr doesn’t automatically do. Even something as simple as putting an .htaccess file (if using apache) in your .git folder with the content being ‘deny from all’ is a step in the right direction.

Thanks for this post, I’m definitely giving Revisr a go in hopes of making it all that much easier to develop WP sites.