[wp-trac] [WordPress Trac] #11454: Add suffix to table prefix on installation

WordPress Trac wp-trac at lists.automattic.com
Wed Dec 16 10:33:43 UTC 2009


#11454: Add suffix to table prefix on installation
-------------------------+--------------------------------------------------
 Reporter:  micasuh      |       Owner:  ryan                                                    
     Type:  enhancement  |      Status:  new                                                     
 Priority:  normal       |   Milestone:  3.0                                                     
Component:  Security     |     Version:  2.9                                                     
 Severity:  normal       |    Keywords:  table_prefix, table prefix, sql injection, vulnerability
-------------------------+--------------------------------------------------

Comment(by micasuh):

 Heh, I randomly said 6 characters but yeah, we should just go to the 64
 character max! At least then it's almost certainly unbreakable. ;-)

 I think at the least there should be some kind of random generated
 table_prefix even if wp_ isn't the default prefix. It just seems silly
 that this is and always has been the same table_prefix all this time and
 is an easy target.

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/11454#comment:2>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list