major security breach (false alarm)

• 

  kitlinapai · Member · Dec 22, 2007 at 8:44 am

  • Copy link
  • Add topic to favorites

  I’ve discovered that when I click on a link to someone’s blogroll it directs to my admin page. The owner of the blogroll in question at one point offered to send out the log-in password to this “protected secret” blog. I never pursued this but was recently alarmed to discover that when I login to my own account and click on the link, that it takes me to my own admin page!!

  Please help! :(

• 

  sulz · Member · Dec 22, 2007 at 8:52 am

  • Copy link

  it sounds like the blog is password protected which is why you’re directed to your admin page whenever you click the link. how is that a major security breach?

• 

  mark · Member · Dec 22, 2007 at 9:11 am

  • Copy link

  Which link?
  Without exact details this is not possible to work with.

• 

  mark · Member · Dec 22, 2007 at 9:15 am

  • Copy link

  There is 1 link in your blogroll to a wordpress.com blog.
  It acts normally when I am logged in or out

  There is no security breach – I am changing the thread title to avoid people becoming unnecessarily worried.

• 

  kitlinapai · Member · Dec 22, 2007 at 9:32 am

  • Copy link

  (Mark, the link wasn’t on my blogroll but on another person’s site. I’m sorry for the anxious title…my misunderstanding. After scanning the WordPress FAQ and forum sites I couldn’t find any info regarding this and concluded that there was a security issue at hand. When I clicked on the link to the other individuals blog it took me to my own admin. site; rather than to a message telling me that I didn’t have access to that blog / that I didn’t have password privileges.)

  Please delete the thread, and accept my very sincere apologies.

• 

  mark · Member · Dec 22, 2007 at 9:38 am

  • Copy link

  Which blog / link though? I can then check and explain what is happening.

  I will delete the link after using it if you wish.

• 

  kitlinapai · Member · Dec 22, 2007 at 10:11 am

  • Copy link

  Thanks so much for your offer to check into this. No worries, I think it’s as Sulz explained…the system is recognizing my automatically remembered password and username details when I click on the link (instead of telling me I have the wrong login details for that password protected blog)

  *embarrassed & determined to be more careful with my query-title wording in future.*

• 

  sulz · Member · Dec 22, 2007 at 12:10 pm

  • Copy link

  all’s well that ends well. =)