devmode.md

Securely enable devmode in live environments

Original idea from: https://github.com/pixelandtonic/craftnet

.env

DEV_MODE_SECRET="my-password"

config/general.php

return [
    // Global settings
    '*' => [
        'devMode' => isset($_REQUEST['secret']) && $_REQUEST['secret'] === getenv('DEV_MODE_SECRET'),
    ],

    // Dev environment settings
    'dev' => [
        'devMode' => true,
    ],
];

Using get

http://example.com/about?secret=my-password

Using cookie

php.ini see http://php.net/request-order

request_order = "GPC"

Browser JS console

document.cookie="secret=my-password"