Skip to:
Content
Pages
Categories
Search
Top
Bottom

Re: Security Concern

@_ck_

Participant

It’s a point of attack.

The idea of hiding the user id or user login for admin is an old security suggestion that is still around.

Because like wordpress there is no limit of password attempts, someone can do a dictionary attack against the user name or knowing the id they can try to find holes in the API.

So by hiding it, it’s just a little harder.

IMHO this would be not worth the effort and break too many things.

Skip to toolbar