Skip to:
Content
Pages
Categories
Search
Top
Bottom

Blog role / forum role on user profile


  • DeepBlue
    Participant

    @deepblue5

    2 years, 8 months ago

    Hi

    I noticed admin can set blog role and forum role on user profiles

    but is it not a security issue that on any frontend forum user profile, a setting can give wp admin role ?

    thanks

Viewing 2 replies - 1 through 2 (of 2 total)

  • Robin W
    Moderator

    @robin-w

    2 years, 8 months ago

    sorry not sure how this is a security issue.

    since anyone with an admin permission can access both back and front end and these are both rendered through a browser, the effect is exactly the same.

    ie there is no technical/security difference between

    site.com/wp-admin/user-edit.php?user_id= etc.

    and

    site.com/forums/user/userxx/edit/

    They are both simply pages renedred through a browser.


    DeepBlue
    Participant

    @deepblue5

    2 years, 8 months ago

    Ok thank you Robin 🙂

Viewing 2 replies - 1 through 2 (of 2 total)
  • You must be logged in to reply to this topic.

Topic Info

Skip to toolbar