[wp-trac] [WordPress Trac] #48374: Username in Source Code

[WordPress Trac]

#48374: Username in Source Code
--------------------------+------------------------------
 Reporter:  briannie      |       Owner:  (none)
     Type:  defect (bug)  |      Status:  new
 Priority:  normal        |   Milestone:  Awaiting Review
Component:  Security      |     Version:
 Severity:  major         |  Resolution:
 Keywords:                |     Focuses:  privacy
--------------------------+------------------------------

Comment (by briannie):

 Thanks for the quick response.  My description was not that accurate.
 Hackers seem to know that by entering /?author=1 they will get the
 username.  Here are two examples:

 https://catoconsultancy.co.uk/?author=1
 reveals
 https://catoconsultancy.co.uk/author/chris-12

 https://cherchat.org/?author=1
 reveals
 https://cherchat.org/author/amanda

 I hope that helps.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/48374#comment:2>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform