[wp-trac] [WordPress Trac] #22798: Invalid URLs not giving 404 with "Default" permalink settings

[WordPress Trac]

#22798: Invalid URLs not giving 404 with "Default" permalink settings
----------------------------------------+------------------------------
 Reporter:  vanchuck                    |       Owner:  (none)
     Type:  enhancement                 |      Status:  reopened
 Priority:  normal                      |   Milestone:  Awaiting Review
Component:  Rewrite Rules               |     Version:  3.4
 Severity:  normal                      |  Resolution:
 Keywords:  dev-feedback bulk-reopened  |     Focuses:
----------------------------------------+------------------------------
Changes (by thowden):

 * keywords:  dev-feedback, bulk-reopened => dev-feedback bulk-reopened


Comment:

 Hi All

 As at today March 19 2019 this issue is still impacting and resulting in
 Google incorrectly reporting a site as hacked when it is not.

 The default redirect is accepting an invalid URL (a "/?exam=" request) and
 presenting the home page with that invalid URL intact. Google interprets
 this as a successful 'hacked page' being displayed.

 I came to this issue as a result of searching for why a 404 page is not
 being displayed or perhaps a 403 Forbidden page would be better ? In any
 case, this issue is still current with WP core  5.1.1–en_AU updates on a
 CPanel / WHM server platform.

 cheers
 Tony
 [https://www.wrenmaxwell.com.au]

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/22798#comment:10>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform