[wp-hackers] WordPress can "leak" if a username is valid

Will Brown will.h.brown at gmail.com
Tue Feb 19 06:23:20 GMT 2008

I don't know about Fantastico installations, but I know that the default
Wordpress installation doesn't give you a choice. I was only using that as
an example - I just feel that if we were worried about people finding
usernames, then we shouldn't have a default username that you're basically
forced to use (unless you use Fantastico).


More information about the wp-hackers mailing list