• Resolved ghueeclipse

    (@ghueeclipse)


    Hello,

    I’m using Postie version 1.8.22, with mail refresh rate every 30 seconds.
    I didn’t schedule a specific cron feature.
    Today, I tried to reach https://mywebsite.myblog.com/wp-cron.php

    Result was the following :

    
    Starting mail fetch
    Postie Version: 1.8.22
    Wordpress Version: 4.5.9
    PHP Version: 5.6.29-0+deb8u1
    OS: Linux pi2 4.4.38-v7+ #938 SMP Thu Dec 15 15:22:21 GMT 2016 armv7l
    POSTIE_DEBUG: On
    Time: 2017-06-04 20:57:43 GMT
    Error log: 
    TMP dir: /tmp/
    Postie is in /var/wordpress/wp-content/plugins/postie/
    cURL version: 7.38.0
    Cron: On
    Alternate Cron: Off
    wp_content_path: /var/wordpress/wp-content
    MAKE SURE POP IS TURNED ON IN SETTING AT Gmail
    postie_getemails: Connecting to pop.gmail.com:995 (pop3-ssl)
    postie_getemails: procol: pop3-ssl
    Connecting via Socket
    Socket: tls://pop.gmail.com:995
    Socket error: 0 - 
    checkOS: Linux
    socket read (1) :+OK Gpop ready for requests from 
    socket write: 'STLS
    '
    checkOS: Linux
    socket read (1) :
    socket write: 'USER <strong>mygmailusename</strong>
    '
    checkOS: Linux
    socket read (1) :+OK send PASS
    socket write: 'PASS <strong>gmailpasswordwordpress</strong>
    '
    checkOS: Linux
    socket read (1) :+OK Welcome.
    postie_getemails: listing messages
    socket write: 'STAT
    '
    checkOS: Linux
    socket read (1) :+OK 0 0
    pop count: Array
    postie_getemails: closing connection
    socket write: 'QUIT
    '
    checkOS: Linux
    socket read (1) :+OK Farewell.
    There are 0 messages to process
    memory at start of email processing:1900104
    

    As you can see, mail + password directly accessible
    Did I something wrong ?
    Why my cron.php is accessible like that ?

Viewing 1 replies (of 1 total)
Viewing 1 replies (of 1 total)

The topic ‘wp-cron.php –> Password accessible’ is closed to new replies.