Login security | ww.wp.xz.cn

galacticjoel3
(@galacticjoel3)

4 years, 3 months ago
Hi everyone,

I noticed that when you click on the author permalink on the blog, the username used to log in appears in the url address instead of the nickname displayed on the website. This helps hackers get a user’s login.
- This topic was modified 4 years, 3 months ago by Steven Stern (sterndata).
- This topic was modified 4 years, 3 months ago by Jan Dembowski. Reason: Moved to Fixing WordPress, this is not an Everything else WordPress topic
The page I need help with: [log in to see the link]

Viewing 2 replies - 1 through 2 (of 2 total)

Vijay Hardaha
(@vijayhardaha)

4 years, 3 months ago

Hey @galacticjoel3,

It’s not considered a security risk, You can find a good read here
https://wptavern.com/why-showing-the-wordpress-username-is-not-a-security-risk

As mentioned on this ticket https://core.trac.ww.wp.xz.cn/ticket/20235#comment:7

If you don’t like this default behaviour, there are plugins in the repository which allow you to change the url format to your preferred layout.

Best,
Vijay

Moderator t-p
(@t-p)

4 years, 3 months ago

Side note to @vijayhardaha ,

Please refrain from using signatures in your posts, because we can see who you are via your name and avatar. See https://ww.wp.xz.cn/support/guidelines/#do-not-spam

Viewing 2 replies - 1 through 2 (of 2 total)

The topic ‘Login security’ is closed to new replies.

Tags

login

In: Fixing WordPress
2 replies
3 participants
Last reply from: t-p
Last activity: 4 years, 3 months ago
Status: not resolved

Topics

Topics with no replies

Non-support topics

Resolved topics

Unresolved topics

All topics