Possible Enumeration Problem with latest version
-
In the latest version (1.3.10) I noticed redirection when using:
http://mysite.com/?author=XIf users didn’t exist or had no posts I saw the forbidden notice, however on other users it redirected them to their user author URL.
I downgraded to 1.3.9 and everything appeared to work again as it should.
-
Strange, as that bit of logic didn’t cahnge betweem 1.39 & 1.3.10
When you say author=x you do mean x is a number? As that is what enumeration detects.
A common mistake is to ‘test’ whist still logged in. The plugin does not stop logged in users from enumerating, as it is assumed that logged in users are valid.
Perhaps reload 1.3.10 and make sure you have logged out before testing. And let me know?
I have also added the issue about testing while logged in to the FAQ as this isn’t the first time this has been noted.
The topic ‘Possible Enumeration Problem with latest version’ is closed to new replies.
