Deleting Trackbacks open to 'world'?
Posted: Sat Jan 13, 2007 4:47 pm
Hi there
,
I receive trackback spam once in a while
and my blog notifies me about a new trackback as it is configured to do.
Having a closer look at the notification e-mail and especially the link for deleting that specific trackback, I wonder if there is any security built in that classifies me as the administrator that is supposed to decide it that trackback should be deleted or not.
The link format is something like the following:
http://blog.url/delete/trackback/xx/yy- ... entry.html
where xx stands for the number of the trackback and yy for the number of the blog entry.
Wouldn't that enable 'world' to delete every single trackback on every s9y blog there is?
Any advice will be very much appreciated.
Regards
Ralf
I receive trackback spam once in a while
Having a closer look at the notification e-mail and especially the link for deleting that specific trackback, I wonder if there is any security built in that classifies me as the administrator that is supposed to decide it that trackback should be deleted or not.
The link format is something like the following:
http://blog.url/delete/trackback/xx/yy- ... entry.html
where xx stands for the number of the trackback and yy for the number of the blog entry.
Wouldn't that enable 'world' to delete every single trackback on every s9y blog there is?
Any advice will be very much appreciated.
Regards
Ralf