[wp-trac] Re: [WordPress Trac] #2697: Hacking URLs under certain formats allows you to see drafts

WordPress Trac wp-trac at lists.automattic.com
Thu Apr 27 05:19:18 GMT 2006


#2697: Hacking URLs under certain formats allows you to see drafts
-----------------------+----------------------------------------------------
       Id:  2697       |      Status:  new                     
Component:  General    |    Modified:  Thu Apr 27 05:19:18 2006
 Severity:  major      |   Milestone:  2.0.2                   
 Priority:  normal     |     Version:  2.0.2                   
    Owner:  anonymous  |    Reporter:  Resiny                  
-----------------------+----------------------------------------------------
Comment (by Otto42):

 Confirmed, this works regardless of permalink structure.

 Example: http://ottodestruct.com/blog/?p=76

 I don't use the p=xx format for my permalinks, but they still appear to
 work. If you intelligently guess numbers, you can get any draft you like
 via this method.

-- 
Ticket URL: <http://trac.wordpress.org/ticket/2697>
WordPress Trac <http://wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list