Plz Must See Blackhaters and Suggest

Rozer82

Registered Member
Joined
Jan 29, 2010
Messages
54
Reaction score
0
Hi Friend ,

I want to advice to you all .

I have a word press site , i allow to user registration and submit article, but i did user not to post directly means , if user post content , content goes for moderation to Administrator.... Everything going fine..

But Since 10 days ...II don't know how Post is coming on Scheduled Post and approve automatically .

Please Suggest , what to do .... My Site to be Secured and users not to post in Scheduled post .


Thanks in Advance ,

Rozer
 
If people are pushing articles to your website all the sudden, but the interface is supposed to limit them to only submit for moderation ... they may be using XMLRPC to bypass regular submission.

This is a quote from an article ...
WordPress could allow a remote authenticated attacker to bypass security restrictions, caused by improper validation by the xmlrpc.php script. A remote attacker with contributor permissions could exploit this vulnerability to publish posts to the Web site.

http://digwp.com/2009/06/xmlrpc-php-security/

Turn off XMLRPC if you're not using it. If its already turned off then it might be a different issue.
 
Back
Top