Skip to content
This repository has been archived by the owner on Oct 17, 2018. It is now read-only.

Possible Vulnerability #15

Open
HKResearch opened this issue Jul 3, 2014 · 1 comment
Open

Possible Vulnerability #15

HKResearch opened this issue Jul 3, 2014 · 1 comment

Comments

@HKResearch
Copy link

Hello,

We are conducting research on the unintended exposure of secrets in GitHub repositories. In a recent scan we conducted of GitHub repositories, our tool detected that one of your repositories appears to expose a secret, and we've confirmed this possibility by manual inspection. The details are below:

# Branch: master
## File: phpsp-blog/wp-config.php
## Line: 26


# Branch: master
## File: phpsp-blog/wp-config.php
## Line: 32


# Branch: master
## File: phpsp-blog/wp-config.php
## Line: 29

If this information is indeed intended to be secret, we would recommend that you remove this file from the repository (using .gitignore) and generate new passwords for the vulnerable accounts. We would much appreciate a response, letting us know if we are mistaken in concluding that this is a secret, or if you made changes as a result of this report.

Thank you.

@pauloelr
Copy link
Member

Essa falha de vulnerabilidade é um falso positivo do robozinho ai em cima

Na verdade o arquivo padrão de configuração do WP que está contido nesse repositório não é usado de fato, ele só redireciona para um outro arquivo salvo em um local seguro no servidor.

Além disso esse já nem é mais o repositório que está sendo usado para as alterações no blog do PHPSP.... portanto pode ser fechada também cc/ @hussani

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants