RSS Feeds reveal protected posts in full text

  • lgxxl

    (@lgxxl)


    8 years, 11 months ago

    I just can’t say how much I am surprised by this essential flaw of wordpress. But RSS Feeds reveal password-protected posts in full text with everything in the feed. That is unbelievable!!!

    I see countless open tickets here and no one seems to care to actually fix this? I have the latest version of WP installed an running.

    How can this bug still go unnoticed by the core developers?

    Now that I shockingly noticed this — which may have already harmed my business — I have reduced the RSS options to only show the latest 5 posts changed publishing date to the past and NEVER again will be delivering the full text as RSS. But the issue remains.

    How ist this possible?

Viewing 3 replies - 1 through 3 (of 3 total)
  • Moderator James Huff

    (@macmanx)

    Volunteer Moderator

    8 years, 11 months ago

    I honestly don’t know what you’re referring to.

    I just tried it myself, and the content of a password-protected post in the feed is:

    Protected: [post title]
    This content is password protected. To view it please enter your password below:

    Password:

    If you don’t believe me, please feel free to see http://delta.jhuff.me/ and http://delta.jhuff.me/feed/

    Perhaps you’re using a plugin or theme function that modifies your theme, but WordPress on its own does not reveal password-protected posts in the feed.

    Thread Starter lgxxl

    (@lgxxl)

    8 years, 11 months ago

    Thank you James for the quick and kind answer!

    Yes, it IS WORKING, if the parameters of the RSS config are as following:

    Blog pages shown max: 8 Entries
    Newsfeeds show last max: 5 Entries
    Show in Newsfeed: Short text

    It did not NOT WORK for me if parameters are like following:

    Blog pages shown max: 8 Entries
    Newsfeeds show last max: 10 Entries
    Show in Newsfeed: Full text

    Are feeds usually driven by the theme or the core files?

    I can not exclude that as a cause, but I would like to determine what is going on here and find a solution.

    Moderator James Huff

    (@macmanx)

    Volunteer Moderator

    8 years, 11 months ago

    The site in my example above is using full text for the feed, so it’s not that.

    Try deactivating all plugins. If that resolves the issue, reactivate each one individually until you find the cause.

    If that does not resolve the issue, try switching to the default theme for your version of WordPress to rule-out a theme-specific issue (theme functions can interfere like plugins).

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘RSS Feeds reveal protected posts in full text’ is closed to new replies.