[wp-trac] Re: [WordPress Trac] #6473: Wordpress 2.5 fails to allow file uploads if you use .htaccess to secure wp-admin

WordPress Trac wp-trac at lists.automattic.com
Mon Apr 20 07:56:02 GMT 2009


#6473: Wordpress 2.5 fails to allow file uploads if you use .htaccess to secure
wp-admin
-------------------------+--------------------------------------------------
 Reporter:  hexley       |        Type:  defect (bug)
   Status:  new          |    Priority:  low         
Milestone:  2.9          |   Component:  Upload      
  Version:  2.5          |    Severity:  normal      
 Keywords:  needs-patch  |  
-------------------------+--------------------------------------------------

Comment(by DD32):

 > some kind of filter, or a slight change, in media_upload_form() may do
 the trick. as in, if we pass the user/pass into the url.

 How?

 passing http://username:password@.. in a document isn't exactly the most
 secure method..

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/6473#comment:10>
WordPress Trac <http://trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list