Opened 3 years ago

Closed 3 years ago

#11383 closed defect (bug) (invalid)

$debug should be set to false for non-admin users

Reported by: Denis-de-Bernardy Owned by: ryan
Priority: normal Milestone:
Component: Security Version: 2.9
Severity: major Keywords: reporter-feedback
Cc:

Description

A non-admin user should not be allowed to see the list of queries run on a WP site by simply adding ?debug=1 to the url.

Attachments (1)

11383.diff​ (370 bytes) - added by Denis-de-Bernardy 3 years ago.

Download all attachments as: .zip

Change History (3)

Denis-de-Bernardy — 3 years ago

comment:1   westi — 3 years ago

  • Keywords reporter-feedback added

I can't see what the issue you are trying to fix here is.

I can't reproduce a query dump with debug=1 in the query string.

Are you using a plugin which is causing this?

comment:2   Denis-de-Bernardy — 3 years ago

  • Milestone 2.9 deleted
  • Resolution set to invalid
  • Status changed from new to closed

Yep, sorry... it was some debug code in my wp-config.php file that I had forgotten about. :-P

Note: See TracTickets for help on using tickets.