2
peeps

Prevent password reset hacking on your WordPress blog

published 1015 days, 14 hours, 6 minutes ago posted by adminadmin 1015 days, 15 hours, 6 minutes ago
Wednesday, August 12, 2009 2:46:01 PM GMT Wednesday, August 12, 2009 1:46:00 PM GMT

As I just said, a new security loophole has just been discovered and it allow anyone to be able to reset your blog admin password. The "hacker" will not get your password (it will be emailed to you) but this can be pretty annoying.

Open the wp-login.php file (It is located in WordPress root directory) and go to line 190. You'll find this line:

if (empty($key))

Simply replace it by the following and save the <p-login.php file:

if(empty($key) || is_array($key))

For more info about the security loophole, you should read this post.

Looking for WordPress hosting? Try WP Web Host. Prices starts at $5/month and you can try it for free!
Prevent password reset hacking on your WordPress blog

category: News | clicked: 1 | | source: www.wprecipes.com | show counter code
tags: bot, WordPress

No comments yet, be the first one to post comment.

To post your comment please login or signup