Make WordPress Core

Opened 20 years ago

Closed 20 years ago

#534 closed defect (bug) (fixed)

Users can access wp-config.php from the template edition page

Reported by: trbecker's profile trbecker Owned by: matt's profile matt
Milestone: Priority: normal
Severity: minor Version:
Component: Administration Keywords:
Focuses: Cc:

Description

Users can access the wp-config.php file from the template edition page in the administration. This way, unauthorized users can have access to the mysql server, if it have an external port open.

Change History (3)

#1 @trbecker
20 years ago

  • Patch set to No

#2 @2fargon
20 years ago

  • Resolution changed from 10 to 60
  • Status changed from new to assigned

#3 @matt
20 years ago

  • fixed_in_version set to 1.3
  • Owner changed from anonymous to matt
  • Resolution changed from 60 to 20
  • Status changed from assigned to closed
Note: See TracTickets for help on using tickets.