[wp-hackers] Maybe a secure-hole

John Sessford john at imjsolutions.com
Thu Oct 9 17:39:08 GMT 2008


One thing to note:

The permalinks to the author page are based on user_nicename, not user_login (in the user table).

By changing the user_nicename to something different, we get the desired effect of not displaying the actual login name on the links to the author. 

I use this trick often. Not sure if it is part of the UI.

John Sessford


More information about the wp-hackers mailing list