Skip to content

Behaviour Verification

Verification is needed that the following scripts should not be directly accessible as is currently the behaviour, or if some installs might need them to be accessible:

  • wp-activate.php: This probably does what the entrypoint script does if no database tables are found
  • wp-blog-header.php
  • wp-comments-post.php
  • wp-load.php
  • wp-mail.php
  • wp-signup.php
  • wp-traceback.php
Edited by Dom Sekotill
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information