Açıklama
WordPress redirects /?author=(number) to /author/(userID) if the author id exists. This is the security vulnerability because an internet user might be able to know all User ID and the user name in a website using WordPress.
If you can control the configuration of a web server, you had better use the rewrite rule (Search as “Block Author URLs”) for reducing the system load of WordPress.
The plugin prevents the security vulnerability regarding the author archive redirection.
Detailed Behavior
1. It isn’t applied in the admin dashboard.
2. If “author” query in URL (QUERY_STRING) exists, displays 404 error.
3. If “/author/” in REQUEST_URI involves, redirects to the top page.
4. Apply to the “redirect_canonical” hook, too.
Yükleme
The operation is the simple.
Please install this plugin and activate it.
İncelemeler
Bu eklenti için herhangi bir değerlendirme bulunmuyor.
Katkıda Bulunanlar ve Geliştiriciler
“Disable Author Archive Redirection” açık kaynaklı yazılımdır. Aşağıdaki kişiler bu eklentiye katkıda bulunmuşlardır.
Katkıda bulunanlar
“Disable Author Archive Redirection” 1 dile çevrildi. Katkıda bulundukları için çevirmenlere teşekkürler.
“Disable Author Archive Redirection” eklentisini dilinize çevirin.
Geliştirmeyle ilgilenir misiniz?
Kodu görüntüleyin, SVN deposuna göz atın ya da RSS ile geliştirme günlüğüne abone olun.
Değişiklik Kaydı
2.2.0
- Tested up to WordPress 7.0.
- Fixed WordPress.org Plugin Check errors and warnings.
- Improved security checks for direct file access, nonce validation, and user capabilities.
- Improved sanitization and escaping for admin and network admin settings screens.
- Updated settings menu slugs to use stable plugin identifiers.
- Added plugin-specific prefixes to internal globals and helper functions.
- Removed manual translation loading for WordPress.org translation compatibility.
2.1.2
- Tested up to WordPress 6.7.2.
2.1.1
- Fixed a problem that the “include” folder had not been uploaded. If your site is not working due to the plugin, please remove the plugin via FTP and reinstall it again.
- Tested up 6.5.2 with PHP 8.3.6
2.1
- Fixed the problem with a warning message when using WP-CLI.
2.0
- Supported the multisite.
- Added the setting menu.
- Tested up 5.6 with PHP 7.4
- Tested up 5.8
- Tested up 6.0
1.0
- First Released.