WPsites/WPide — Issue #13: Security of V2 needs to be addressed
Author: WPsites
Created: 2012-02-27 11:57:50+00:00
State: open
Labels: Bug, Feature

The file manager needs looking at from a security point of view. If someone knows where you have the plugin installed they can access your wp-content files (only read only but can view the contents of PHP files).

That whole component needs to be implemented using WordPress ajax system, Roles and Capabilities.

Save function also needs looking at, nonces implemented etc