Email publically visible with Wordpress Plugin

(4 posts)

Tags:

srijken
Member

The wordpress plugin produces javascript that contains this:

woopra_id = '123456789';
var woopra_array = new Array();
woopra_array['name'] = 'admin';
woopra_array['Email'] = 'user@domain.tld';
woopra_array['avatar'] = 'http://www.gravatar.com/avatar.php?gravatar_id=XXX';

My question is, why is the Email in there? Seems like a target for bots looking for email addresses

Posted 4 months ago #
BOLL
Member

You scared me a bit with this. I've been checking it out now, and it seems like it is only when your are signed in that your user information is in the javascript, to give Woopra information about the Wordpress user that is signed on. When a guest or bot loads the page the only thing in there is "woopra_id = '123456789';".

At least this is how it appears to me :P

Posted 4 months ago #
Lazy
Member

you are absolutly right, BOLL :)

Posted 4 months ago #
srijken
Member

I'm glad I have to say you're right :-)
False alarm, thanks for pointing it out.

Posted 4 months ago #

Reply

You must log in to post.