Comments on: Secure Your WordPress Plugins

By: Guinevere

Guinevere — Tue, 22 Jan 2008 23:41:56 +0000

Same here, done! thanks for posting this…

By: bmattb

bmattb — Mon, 21 Jan 2008 18:28:30 +0000

Thanks for the tip, done and done.

By: andreg

andreg — Sat, 19 Jan 2008 19:45:19 +0000

Good point. I tend to think the core WordPress app is fairly secure and has a good track record of fixing holes. Plugins are always a little scary since anyone can write one and there is no requirement for good security practices.

By: Keebler

Keebler — Sat, 19 Jan 2008 18:47:22 +0000

That’s a decent sized hole in WP! I uploaded an index.html but that doesn’t help if you know the name of the files for the plugin. For example, if you know a specific plugin has a file foobar.php, you can just browse to /wp-content/plugins/foobar.php and you’ll quickly know if they have that plugin or not.