WordPress.org
Get WordPress

Make WordPress Core

Opened 15 years ago

Closed 15 years ago

#11383 closed defect (bug) (invalid)

$debug should be set to false for non-admin users

Reported by: denis-de-bernardy's profile Denis-de-Bernardy Owned by: ryan's profile ryan
Milestone: Priority: normal
Severity: major Version: 2.9
Component: Security Keywords: reporter-feedback
Focuses: Cc:

Description

A non-admin user should not be allowed to see the list of queries run on a WP site by simply adding ?debug=1 to the url.

Attachments (1)

11383.diff​ (370 bytes) - added by Denis-de-Bernardy 15 years ago.

Download all attachments as: .zip

Change History (3)

@Denis-de-Bernardy
15 years ago

#1 @westi
15 years ago

  • Keywords reporter-feedback added

I can't see what the issue you are trying to fix here is.

I can't reproduce a query dump with debug=1 in the query string.

Are you using a plugin which is causing this?

#2 @Denis-de-Bernardy
15 years ago

  • Milestone 2.9 deleted
  • Resolution set to invalid
  • Status changed from new to closed

Yep, sorry... it was some debug code in my wp-config.php file that I had forgotten about. :-P

Note: See TracTickets for help on using tickets.