[wp-trac] Re: [WordPress Trac] #3317: Protected posts should not be found in searches

[WordPress Trac]

#3317: Protected posts should not be found in searches
--------------------------+-------------------------------------------------
 Reporter:  dosa          |        Owner:  anonymous
     Type:  defect (bug)  |       Status:  reopened 
 Priority:  normal        |    Milestone:  2.8      
Component:  Security      |      Version:  2.5.1    
 Severity:  normal        |   Resolution:           
 Keywords:                |  
--------------------------+-------------------------------------------------

Comment(by netsensei):

 I've looked at this issue. Just wanted some feedback.

 My solution would be to change the query to exclude all password protected
 posts, except those that are 'unlocked' with a valid password. I think
 this would require a change of the queries around line 1755 in query.php.

 I suppose one would left join against a list of password unlocked
 posts/pages.

 Just tossing with the idea here. I didn't actually tried to implement this
 because I'm not that knowledgeable with wordpress core code.

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/3317#comment:9>
WordPress Trac <http://trac.wordpress.org/>
WordPress blogging software