WordPress.org

Ready to get started?Download WordPress

Forums

Page Links To
[resolved] Important SECURITY issue! (5 posts)

  1. Diogo15
    Member
    Posted 3 years ago #

    Any user, that does not have an administrative role, should be allowed to change page links!!!....

    http://wordpress.org/extend/plugins/page-links-to/

  2. ClaytonJames
    Member
    Posted 3 years ago #

    Any user, that does not have an administrative role, should be allowed...

    Why would you want that, and how is that a security issue with the plugin?

  3. Diogo15
    Member
    Posted 3 years ago #

    Jajaja, i am sorry, here i go again:

    Any user, that does not have an administrative role, should not be allowed to change page links...

  4. ClaytonJames
    Member
    Posted 3 years ago #

    I see what you are saying now. I use the plugin regularly on several sites, and I view it more as a "User Trust" issue than a security issue. Anyone to whom I give the ability to write posts or create pages, I trust with that responsibility.

    I don't think regular subscribers can change the link, and contributor posts are held for approval, so anything below "Author" capabilities falls to administration oversight. I'm not sure I would consider it a security issue as much as I do an administrative issue. But it's a very interesting consideration.

  5. Diogo15
    Member
    Posted 3 years ago #

    I don't know what happened, know that i enter to wordpres backend as author i can not see the tab pages(as it should be), everithing works fine!!!...

Topic Closed

This topic has been closed to new replies.

About this Plugin

About this Topic