search

devinsays / portfolio-press

A WordPress theme for artists and designers to showcase their work.
https://wptheming.com/portfolio-theme/
GNU General Public License v2.0
62 stars 30 forks source link

Security fix: Redirect Portfolio #48

Closed iceman1989 closed 10 years ago

iceman1989 commented 10 years ago

Check if the portfolio is password protected and the user is authorized to view the content. Otherwise redirect to the post of the content.

devinsays commented 10 years ago

Sorry for the delay on this. I've been working on a large rebuild of the theme.

I don't think a redirect is necessary here. If we do that there would be no opportunity to actually enter the password and view the content.

However, I have changed this so that the images are hidden by default. Content and comments are also hidden. So all that remains is the password log in, title, and tags.

Please follow up if you have any other suggestions or recommendations.