WordPress.org

Make WordPress Core

Opened 17 years ago

Closed 17 years ago

#534 closed defect (bug) (fixed)

Users can access wp-config.php from the template edition page

Reported by: trbecker Owned by: matt
Milestone: Priority: normal
Severity: minor Version:
Component: Administration Keywords:
Focuses: Cc:

Description

Users can access the wp-config.php file from the template edition page in the administration. This way, unauthorized users can have access to the mysql server, if it have an external port open.

Change History (3)

#1 @trbecker
17 years ago

  • Patch set to No

#2 @2fargon
17 years ago

  • Resolution changed from 10 to 60
  • Status changed from new to assigned

#3 @matt
17 years ago

  • fixed_in_version set to 1.3
  • Owner changed from anonymous to matt
  • Resolution changed from 60 to 20
  • Status changed from assigned to closed
Note: See TracTickets for help on using tickets.