[wp-xmlrpc] Hidden Custom Fields - Ruby

Andrew Nacin wp at andrewnacin.com
Sun Dec 23 23:01:08 UTC 2012


On Sun, Dec 23, 2012 at 5:59 PM, Bradly Swart <brad8711 at gmail.com> wrote:

> Yea, I had a look at that, I couldn't figure out how to call it from a
> Ruby xmlrpc call though :/
>

Right, you won't be able to. The point of protecting underscored meta
values was to prevent privilege escalation via XML-RPC — basically, prevent
users from editing keys that they wouldn't be able to edit through the
admin.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.automattic.com/pipermail/wp-xmlrpc/attachments/20121223/20abafdc/attachment-0001.htm>


More information about the wp-xmlrpc mailing list