Make WordPress Core

Opened 17 years ago

Closed 17 years ago

#11383 closed defect (bug) (invalid)

$debug should be set to false for non-admin users

Reported by: Denis-de-Bernardy Owned by: ryan
Priority: normal Milestone:
Component: Security Version: 2.9
Severity: major Keywords: reporter-feedback
Cc: Focuses:

Description

A non-admin user should not be allowed to see the list of queries run on a WP site by simply adding ?debug=1 to the url.

Attachments (1)

11383.diff (370 bytes ) - added by Denis-de-Bernardy 17 years ago.

Download all attachments as: .zip

Change History (3)

#1 @westi
17 years ago

  • Keywords reporter-feedback added

I can't see what the issue you are trying to fix here is.

I can't reproduce a query dump with debug=1 in the query string.

Are you using a plugin which is causing this?

#2 @Denis-de-Bernardy
17 years ago

  • Milestone 2.9
  • Resolutioninvalid
  • Status newclosed

Yep, sorry... it was some debug code in my wp-config.php file that I had forgotten about. :-P

Note: See TracTickets for help on using tickets.