[wp-trac] [WordPress Trac] #52544: Removing database tables allows anyone to take over all website files

WordPress Trac noreply at wordpress.org
Tue Feb 23 15:09:11 UTC 2021


#52544: Removing database tables allows anyone to take over all website files
-----------------------------+------------------------------
 Reporter:  winternetstudio  |       Owner:  (none)
     Type:  enhancement      |      Status:  new
 Priority:  normal           |   Milestone:  Awaiting Review
Component:  Security         |     Version:  5.6.1
 Severity:  major            |  Resolution:
 Keywords:                   |     Focuses:
-----------------------------+------------------------------

Comment (by apmarshall):

 Also: if you have deleted the database, then you need a new database to
 initiate the install, right? So there is one more intervening step here,
 which is that either a new database with the same credentials needs to be
 created OR a new database created and new credentials put in wp-config.php

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/52544#comment:3>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list