[wp-trac] [WordPress Trac] #47512: Added default unique prefix to database

WordPress Trac noreply at wordpress.org
Mon Jun 10 21:14:48 UTC 2019


#47512: Added default unique prefix to database
-------------------------+----------------------
 Reporter:  jweston      |       Owner:  (none)
     Type:  enhancement  |      Status:  closed
 Priority:  normal       |   Milestone:
Component:  Security     |     Version:
 Severity:  trivial      |  Resolution:  wontfix
 Keywords:  close        |     Focuses:
-------------------------+----------------------
Changes (by johnbillion):

 * status:  new => closed
 * version:  trunk =>
 * resolution:   => wontfix
 * milestone:  Awaiting Review =>


Comment:

 I'm surprised that Wordfence article glosses over blind SQL injection,
 because that's the main reason for advocating for changing the table
 prefix (other than its intended use of supporting multiple sites in one
 database).

 That said, the general consensus is that this is security by obscurity and
 doesn't offer much real world protection.

 Thanks anyway for the suggestion @jweston!

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/47512#comment:4>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list