Security: telling hackers login usernames

  • Resolved FinnJackson

    (@innackson)


    8 years, 1 month ago

    Hi,

    I am using the theme 2010 but I believe this vulnerability applies to several themes.

    If you click on the author of a post then it takes you to a list of all the posts by that author.

    Very helpful, except that the URL contains the actual login username of the author, instead of the nickname.
    For example,
    http://www.finnjackson.com/author/bodmin/

    Is it possible to correct this vulnerability, by using the nickname in the URL instead?

    Thanks

Viewing 3 replies - 1 through 3 (of 3 total)
Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘Security: telling hackers login usernames’ is closed to new replies.