[wp-trac] Re: [WordPress Trac] #4155: Let's hide the version number from public display

WordPress Trac wp-trac at lists.automattic.com
Tue Apr 17 19:56:50 GMT 2007


#4155: Let's hide the version number from public display
----------------------------+-----------------------------------------------
 Reporter:  drmike          |        Owner:  anonymous
     Type:  defect          |       Status:  new      
 Priority:  normal          |    Milestone:  2.4      
Component:  Administration  |      Version:           
 Severity:  normal          |   Resolution:           
 Keywords:                  |  
----------------------------+-----------------------------------------------
Comment (by drmike):

 There's also a dozen other ways to determine version

 You're right, there is.  It's an issue with other softwares and has caused
 issues in the past.  Let's go ahead and prevent it from happening to WP.

  it's included in nearly every theme, for example

 Yup, it's a template function call.  Makes it easy to scan for that
 hackable version of wordpress that's out there.

  they need to upgrade to a non-hackable one

 Agreed but not everybody does so.

  Security by obscurity ain't going to work.

 Agreed but you don't hang up a sign on your front door stating that you've
 left the building when you go out, do you?

-- 
Ticket URL: <http://trac.wordpress.org/ticket/4155#comment:2>
WordPress Trac <http://trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list