iamthwee said
@thecodingdude actually LOOK at your WP-config file.You’ll notice ‘DBPASS’ is stored as a one time hash?
Do you know what that means?
/** MySQL database password */
define(‘DB_PASSWORD’, ‘password_here’);
include(”../wp-config.php”);
echo DB_PASSWORD;
Why don’t you try it?
Since when does anyone have their wp-config file configured with the password stored as plain text such as:
define(‘DB_PASSWORD’, ‘password_here’);
I really don’t know if you’re being serious?
iamthwee said
Since when does anyone have their wp-config file configured with the password stored as plain text such as:define(‘DB_PASSWORD’, ‘password_here’);I really don’t know if you’re being serious?
I am being serious and yes people do.
[Edit] I just got what you meant…
- Author had a File in an Envato Bundle
- Author had a Free File of the Month
- Author was Featured
- Bought between 10 and 49 items
- Contributed a Blog Post
- Contributed a Tutorial to a Tuts+ Site
- Denmark
- Exclusive Author
- Has been a member for 2-3 years
Why would you give someone your passwords in the first place? o0
The same reason people eat at McDonalds. Speed and price. Everybody knows it’s garbage, but people use it anyways.
*dupe
michaelhejja said
The same reason people eat at McDonalds. Speed and price. Everybody knows it’s garbage, but people use it anyways.
I hate Wormpress with a passion.
And so it begins…
Up next: iOS vs. Android.
- Sold between 100 000 and 250 000 dollars
- Author had a File in an Envato Bundle
- Has been a member for 4-5 years
- Author had a Free File of the Month
- Won a Competition
- Author was Featured
- Item was Featured
- Bought between 10 and 49 items
Thecodingdude saidThat’s how all php cms work, you need to set db password somewhere. If somebody has access to your filesystem then you’re just screwed and can’t really blame wordpress for that.
include(”../wp-config.php”);
echo DB_PASSWORD;
Remote exploits have been found in core files but much less frequently than other popular cms like joomla just to name one. The real problem are themes and plugins coded without any security check.
