Multisite security issue

  • Resolved froggod

    (@froggod)


    3 years, 8 months ago

    On Multisite, the Rank Export feature is exporting users from all subsites.

    Fresh test install, per subsite activated.

    Is this intended behavior?

Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Author Ruben Garcia

    (@rubengc)

    Hi @froggod

    No, what you describe is not a security issue

    This happens because even on multisite there is only 1 database for your users (posts or comments are separated per site, but users do not get splitted in this way)

    For that at the moment you use any of our tools, all users will appear

    Hope it helps!

    Thread Starter froggod

    (@froggod)

    I understand that multisite shares a user table, but this is still a security issue because any admin on a subsite can download a file containing emails for all users across the network.

    This is a huge problem for gdpr and just not good in general. There are ways to only pull user data from individual subsites even though they’re sharing the same tables.

    Plugin Author Ruben Garcia

    (@rubengc)

    Hi @froggod

    Your are right, I didn’t think about it in the way you mention so I just added this change to our roadmap to only export users from the site the tool gets executed

    Thank you so much for your suggestion and help us make GamiPress better!

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘Multisite security issue’ is closed to new replies.