Hide Backend feature doesn't allow me to use admin-post.php

  • 0xff

    (@0xff-1)


    9 years, 9 months ago

    Hi guys,

    I’m having an issue to process POST requests via admin-post.php because I have enabled Hide Backend feature. I would like to know the reason why you block admin-post.php but do not block admin-ajax.php? Any security points about it or it just a bug?

    File to check:
    /core/modules/hide-backend/class-itsec-hide-backend.php line 161

    strpos( $_SERVER['REQUEST_URI'], 'admin-ajax.php' ) === false

    But no condition for admin-post.php

    https://wordpress.org/plugins/better-wp-security/

Viewing 1 replies (of 1 total)
Viewing 1 replies (of 1 total)

The topic ‘Hide Backend feature doesn't allow me to use admin-post.php’ is closed to new replies.