Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Vista
BugTraq
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
Re: Wordpress - Broken Access Control Dec 19 2007 09:29PM
Abel Cheung (abelcheung gmail com)
On 2007-12-16(Sun) 10:07:29 -0000, otto (at) ottodestruct (dot) com [email concealed] wrote:
> The is_admin() function is not supposed to tell whether a user is an administrator or not, it tells whether the user is looking at one of the administration pages. As such, this function does exactly what it is supposed to do.
>
> As...

[ more ]  





 

Privacy Statement
Copyright 2007, SecurityFocus