Blocking author=n reveals username

Viewing 8 replies - 1 through 8 (of 8 total)
  • Plugin Author WFMattR

    (@wfmattr)

    It may be that your theme includes the username somewhere on the page — most that I have seen are in a class on the <body> tag, like <body class=”author-someusername”> (with a lot more classes before and after, of course.)

    On any regular page of your site, if you view the source of the page and search for the author name that is being reported, can you find it? And if not, do you find it if you try to visit “yoursite.com/?author=#” (for one of the valid user numbers)?

    -Matt R

    Thread Starter sevensoutbill

    (@sevensoutbill)

    Nope, no author in the body tag.

    Yes, I get the same author for all author id numbers used in ?author=#. Today it’s a different username. It appears to show the same user for all ids – the last user that published a post. Weird.

    Bill

    Plugin Author WFMattR

    (@wfmattr)

    Ok, thanks for checking that, and for the details on the username changing. I am passing this on to the dev team to investigate further.

    -Matt R
    FB984

    Thread Starter sevensoutbill

    (@sevensoutbill)

    Thanks, Matt – appreciated. Fyi, this is happening on a number of our sites.

    Plugin Author WFMattR

    (@wfmattr)

    Thanks for the follow-up — the issue has been confirmed for certain setups and will be fixed in a future release.

    -Matt R

    Thread Starter sevensoutbill

    (@sevensoutbill)

    Awesome! Thanks, Matt. You guys rock.

    Thread Starter sevensoutbill

    (@sevensoutbill)

    On a side note, we are definitely seeing a direct correlation between the revealed username and login attempts using the same username.

    Same issue here with 6.0.20.

    This is not resolved yet.

    Please mark issues only as resolved if they really ARE resolved in a release version, thanks.

Viewing 8 replies - 1 through 8 (of 8 total)
  • The topic ‘Blocking author=n reveals username’ is closed to new replies.