[DeepBlue]

Hi

I noticed admin can set blog role and forum role on user profiles

but is it not a security issue that on any frontend forum user profile, a setting can give wp admin role ?

thanks

[Robin W]

sorry not sure how this is a security issue.

since anyone with an admin permission can access both back and front end and these are both rendered through a browser, the effect is exactly the same.

ie there is no technical/security difference between

site.com/wp-admin/user-edit.php?user_id= etc.

and

site.com/forums/user/userxx/edit/

They are both simply pages renedred through a browser.

[DeepBlue]

Ok thank you Robin 🙂