GET /v1/sites/{siteId}/php-settings

Autenticação

Envie uma chave de API como um token de portador. A chave deve ter a permissão sites.view; uma chave sem ela é recusada com 403, e não 404.

Este endpoint não requer um ID de organização. Sua chave já identifica a organização à qual pertence, e a resposta é delimitada a ela.

Experimente

Substitua qualquer item entre colchetes por seus próprios valores e o espaço reservado para a chave por uma chave do seu painel.

curl -X GET https://api.zinndigital.com/v1/sites/{siteId}/php-settings \
  -H "Authorization: Bearer zdk_live_…"

Conectado? O console da API no seu painel preenche o ID da sua organização real e a sua própria chave, e executa a requisição contra a API de produção para que você possa ver a resposta real. Abra este endpoint no console da API

Detalhes

Everything the site's PHP screen needs, in one read. `extensions` lists Tier 0 and Tier 1 as `locked: true` — always on, not a choice — alongside the Tier 2 extensions the customer may switch. They are **rendered rather than hidden** because "does this host have ImageMagick?" is one of the commonest pre-sales and migration questions there is, and an empty list answers it worse than a locked switch does. `ini` carries only the two customer-editable bands. The staff-only band (`disable_functions`, `open_basedir`, `sendmail_path`, `upload_tmp_dir`, `expose_php` and extension loading itself) is **absent from the payload**, not merely hidden by the panel: those directives are the per-site isolation boundary, and a customer who can edit `disable_functions` can re-enable `shell_exec`. Each capped directive carries `cap` — the ceiling this site's **plan** allows — so the panel can stop the control at the right place rather than let the customer type a value and meet a refusal. `cap_raised_by_support` and `override_expires_at` are how a staff override is made **visible to the customer**, which is one of the three properties `docs/204` §7a requires of one. `lve` reports the site's resource tier and what each limit does when it is reached. ⭐ `ep` is the one that emits `508 Resource Limit Is Reached` — a status code that names no resource, no number and no remedy, so a customer who meets it concludes the host is broken. `applied_at` is `null` when no settings have ever been pushed to the machine — a different fact from "pushed and confirmed", and the only one of the two that needs an engineer. Requires `sites.view`.

Parâmetros

Resposta

Erros que este endpoint pode retornar

401 · 403 · 404 · 429