Support » Everything else WordPress » Google Codesearch can display db names and passwords?

Viewing 4 replies - 1 through 4 (of 4 total)
  • Moderator Samuel Wood (Otto)

    (@otto42)

    WordPress.org Admin

    Hah!

    Don’t store your backups in a publically accessible location. Seems obvious, in retrospect, eh?

    whooami

    (@whooami)

    Member

    oh my!

    Maybe a novice question, but…

    If I use the built-in WP database backup plugin (I think it’s based on Skippy’s)… and I choose the option “Save a back-up on your server”… will the backup be in one of these ‘publically accessible locations’?

    Can I make that location non-public, but still on my server?

    Moderator Samuel Wood (Otto)

    (@otto42)

    WordPress.org Admin

    Backups go into a directory under wp-content called backup-some_random_num. It would not be found by any sort of casual browsing.

    The wp-content directory contains an index.php file, to prevent casual browsing of the folders in question, so unless you post links to your backups, Google will not find them. If you look at the files with the search found above, you’ll notice that none of them fit the pattern defined by the backup plugin for its files. These are backup files that people uploaded to CVS/SVN or files that they put on a server and linked to from somewhere.

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘Google Codesearch can display db names and passwords?’ is closed to new replies.