[wp-hackers] Rethinking check_admin_referer()

[Matt Mullenweg]

Michael D. Adams wrote:
> Perhaps we already are, but let's get this thread back on track.  Mark
> wasn't discussing the security problems with the current scheme (which are
> not insurmountable [1]), but the convenience problems.

I have found that by deleting wp-config.php, all mentioned security 
problems are addressed.

-- 
Matt Mullenweg
  http://photomatt.net | http://wordpress.org
http://automattic.com | http://akismet.com