[wp-hackers] Security Vulnerability found - Forum Post

[denis at semiologic.com]

Quoting Matthew Mullenweg <m at mullenweg.com>:

> denis at semiologic.com wrote:
> > - fetch config.php through the file editor
>
> Incidentally, we don't allow this.

just a thought... do you disallow other files to view it? as in, would it be
possible to create a file using the file editor, meant to view config.php?



> --
> Matt Mullenweg
>   http://photomatt.net | http://wordpress.org
> http://pingomatic.com | http://cnet.com
> _______________________________________________
> wp-hackers mailing list
> wp-hackers at lists.automattic.com
> http://lists.automattic.com/mailman/listinfo/wp-hackers
>




----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.