#1807 closed defect (bug) (worksforme)
Password protected post can be escape by category_name
| Reported by: |
|
Owned by: | |
|---|---|---|---|
| Milestone: | Priority: | normal | |
| Severity: | major | Version: | 1.5.2 |
| Component: | Security | Keywords: | password protected post bg|squashed |
| Focuses: | Cc: |
Description
Hi, I'm running WordPress 1.5.2 with PHP 4.3.10 and Apache 1.3.33 on my Debian GNU/Linux
And I found this problem in accidental.
1.Create an new password protected post and set categories to "protected"
2.Access it through follow URL:
http://chinglong.no-ip.info/index.php?category_name=protected
In my case, the page can be access without enter password!
Change History (3)
Note: See
TracTickets for help on using
tickets.
Could not recreate in WordPress 1.6