WordPress.org

Ready to get started?Download WordPress

Ideas

Make protected posts properly protected

  1. Hannes
    Member

    It doesn't look like posts that are protected with a password are properly protected. If you create a protected post and add a few photos (attachments) people can still access those photos directly without entering the password. For example if the protected post is at:
    http://www.example.com/2009/02/10/protected-post/img_1724
    then people could go directly to:
    http://www.example.com/2009/02/10/protected-post/img_1234
    and they could see the photo without entering the post's password.

    Maybe this can be solved by editing my theme - can I put some code around my photo/attachment template that checks if the post is protected or not?

    You can also see the tags of protected posts without entering the password.

    Another thing - the comments RSS feed. If somebody leaves a comment on a protected post you can see that person's name in the comments RSS feed.

    Posted: 5 years ago #
  2. Jen Mylo
    Key Master

    Bug reports should be submitted to Trac.

    Posted: 4 years ago #

RSS feed for this topic

Topic Closed

This topic has been closed to new replies.

  • Rating

    12345
    0 Votes
  • Status

    This is not a core suggestion