[wp-hackers] If You Thought Weak Passwords Were the Only Weakness...

[Lloyd D Budd]

On 10/8/06, Roy Schestowitz <r at schestowitz.com> wrote:
> I worry that this might feed some script kiddies, but it's very
> important to explicitly tell people _NOT_ to share their files too
> openly.
>
> http://www.google.com/codesearch?as_q=username&as_filename=wp-config.php
>
> Such things could lead people to blaming the CMS rather than their own
> actions... and previously I shared a story about a blog we have on
> campus, which was cracked having had a text file available with /all/
> the passwords.

Old news ;-)

http://comox.textdrive.com/pipermail/wp-hackers/2006-October/009024.html
[wp-hackers] Google Code Search vs WordPress
Bas Bosman wordpress at nazgul.nu
Thu Oct 5 22:59:28 GMT 2006