[wp-hackers] Enable Sending Referrers

[Matt Mullenweg]

Owen Winkler wrote:
> If WordPress created a hash from the database password (with salt), 
> provided it to any core code/plugins for use in features like these, and 
> unset the database password (or undefined it), then things might be a 
> tad more secure.  And any little bit helps.

What we're talking about is really nonces, which I agree would be an 
improvement over our "enable sending referrers" solution.

-- 
Matt Mullenweg
http://photomatt.net  | http://wordpress.org
http://pingomatic.com | http://cnet.com