[wp-trac] [WordPress Trac] #14203: "Internal" WP user name shown to world when browsing that user's posts

WordPress Trac wp-trac at lists.automattic.com
Mon Jul 5 13:28:18 UTC 2010


#14203: "Internal" WP user name shown to world when browsing that user's posts
--------------------------+-------------------------------------------------
 Reporter:  wPcoMuser     |       Owner:                 
     Type:  defect (bug)  |      Status:  new            
 Priority:  normal        |   Milestone:  Awaiting Review
Component:  General       |     Version:  3.0            
 Severity:  normal        |    Keywords:                 
--------------------------+-------------------------------------------------
 1. Create WP user INTERNAL_NAME
 2. That WP user then selects a screen name SCREEN_NAME, and selects to
 only display SCREEN_NAME to the world.
 3. The WP blog still shows that user's posts under
 http:/www.xxx.com/wp/authors/INTERNAL_NAME/[post], when a third party
 clicks to see that user's posts, the directory that is displayed is
 INTERNAL_NAME.

 This happens with all themes, no plug-ins active.  Seems to be internal to
 WP.  I have seen it on versions from ~2.7 through 3.0 final.

 I consider it a bug because it stops people from using more complex user
 names for security, although I appreciate whether it's a bug or a feature
 can be debated.

 I searched and could find no similar bug.

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/14203>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list