Make WordPress Core

Opened 13 years ago

Closed 11 years ago

#1723 closed defect (bug) (worksforme)

All private and draft posts can be retrieved via XML-RPC

Reported by: kevinh Owned by:
Milestone: Priority: high
Severity: major Version: 1.5.2
Component: XML-RPC Keywords:
Focuses: Cc:


Regardless of what username and password I use, I can retrieve a blog's entire set of draft and private posts via the metaWeblog.getRecentPosts XML-RPC API call. If these posts are to be retrieved, they should at least be marked with an mt_keyword or category that denotes the post status (published, draft, or private).

Change History (2)

#1 @johnbillion
11 years ago

Can anyone with experience of XML-RPC confirm this bug still exists?

#2 @foolswisdom
11 years ago

  • Resolution set to worksforme
  • Status changed from new to closed

Closing WORKSFORME (never seen this behavior during one year testing Flock with WP); also would have had other reports of this.

kevinh, if you can try to reproduce this that would be great! If you are able to, please include the environment and steps.

Note: See TracTickets for help on using tickets.