[wp-trac] Re: [WordPress Trac] #3317: Protected posts should not be found in searches

WordPress Trac wp-trac at lists.automattic.com
Fri Jun 6 12:24:54 GMT 2008


#3317: Protected posts should not be found in searches
----------------------+-----------------------------------------------------
 Reporter:  dosa      |        Owner:  anonymous
     Type:  defect    |       Status:  reopened 
 Priority:  normal    |    Milestone:           
Component:  Security  |      Version:  2.5.1    
 Severity:  normal    |   Resolution:           
 Keywords:            |  
----------------------+-----------------------------------------------------
Comment (by arminbw):

 The protected content does not show up, but - like dosa stated - you can
 "fish" for it.


 simplified szenario:

 1. You write an article titled "people we do not like"[[BR]]
 2. You include the Name "Sue" in your article and protect it with a
 password[[BR]]
 3. Sue visits your blog and searches for her name[[BR]]
 4. While she is at it, she starts to search for all kind of other names..

-- 
Ticket URL: <http://trac.wordpress.org/ticket/3317#comment:6>
WordPress Trac <http://trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list