I haven’t tried but perhaps password protecting the drafts would work?
Drafts shouldn’t be viewable IMO, don’t know if this is a bug or just an oversight from the devs.
hmmm, yep, just tested this. kinda not good!
this should really big considered a bug.
Are you logged in when testing?
See http://trac.ww.wp.xz.cn/ticket/2697 — in particular, this response:
If you are logged in, you can see draft posts for which you have edit privileges in this manner. Make sure aren’t logged in. I can’t see your drafts using those links.
Thread Starter
zapata
(@zapata)
I logged out and then type in the url of the draft which is fairly easy to decipher by anyone. It goes like this:
http://www.blogsitename.com/?p=Number
That led me to the draft that was copied by one of the websites that I had long suspected of somehow managing to steal my ideas.
You don’t have to be logged in to access the draft if you use the above URL.
I can’t reproduce it when I’ve logged out on my own blog. Have a harmless draft on yours that you’d be willing to post a link to?
I thought this to be a bug too, but when I logged out and closed and reopened my browser, then attempted to view my drafts, I got nothing back but a 404.
Drafts can only be viewed by users with the priveledges to do so. This is so the preview functionality works in the editor page.
But, just post a link to a draft and see if anybody else can see it.
I tested it by logging out, and when I viewed the post, it did not show the edit button, which the theme I’m using does when an author person is logged in. This would seem to indicate I am reading the post without being logged in.
I’m willing to do a test draft and post the link.
http://dmcireunion.com/courtyard/84
Tell me the secret word.
Far out!
No why can’t I replicate that I wonder? Weird. You might want to revisit that trac link I posted earlier…
Charle97 wins an absolutely huge prize that is neither huge, nor a prize.
yep, weird stuff. I wonder if there’s a setting somewhere that affects this. or one of my plugins or something … somehow …
Thread Starter
zapata
(@zapata)
Sorry guys just logged in to check comments. Heres the draft link :
http://desitrain.com/?p=340
So one of you is 2.0.2, the other is 2.0. I’m on 2.0.2 and still can’t reproduce it.
Plugins maybe? What plugins are zapata and manstraw running?
Thread Starter
zapata
(@zapata)
The Adhesive one strikes me as unusual specifically because it’s messing with the post query. Try disabling it and see if the same thing happens.
Failing that, disable the rest, one at a time, and see if the problem goes away for any given plugin.
