![(please configure the [header_logo] section in trac.ini)](/chrome/site/your_project_logo.png){kind=logo}
#1807 closed defect (bug) (worksforme)
Password protected post can be escape by category_name
| Reported by: | clsu | Owned by: | |
|---|---|---|---|
| Priority: | normal | Milestone: | |
| Component: | Security | Version: | 1.5.2 |
| Severity: | major | Keywords: | password protected post bg|squashed |
| Cc: | Focuses: |
Description
Hi, I'm running WordPress 1.5.2 with PHP 4.3.10 and Apache 1.3.33 on my Debian GNU/Linux
And I found this problem in accidental.
1.Create an new password protected post and set categories to "protected"
2.Access it through follow URL:
http://chinglong.no-ip.info/index.php?category_name=protected
In my case, the page can be access without enter password!
Change History (3)
Note:
See TracTickets
for help on using tickets.
Could not recreate in WordPress 1.6