[wp-hackers] Important Forum Post

[Mark Jaquith]

This seems a good approach. 

I agree that the function intended for the code was and is a good thing 
to be doing.  You should probably disable the code on your blog for now, 
to prevent jokers from messing with your site, but the long term 
solution should probably be an authenticatin check before making the change.

Ryan Duff wrote:

>Ryan Boren wrote:
>  
>
>>This code was introduced so that sites wouldn't break when 
>>people changed location.  This is one of the most frequent 
>>support questions we encounter.  We'd still like to provide a 
>>means of relocating one's weblog without having to dip into 
>>phpMyAdmin.  Ideas welcome.
>>    
>>
>
>It was suggested in one of the threads about just forcing it to
>authenticate. When the if statement is true, prompt for the admin user/pass,
>if that validates, update the table, if it doesn't don't update.
>
>Ryan Duff
>http://www.duff-duff.net
>AIM: ryancduff
>
>
>
>  
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: /pipermail/hackers_wordpress.org/attachments/20041203/bfb3c90f/attachment-0001.htm