Add your thoughts here… (optional)
WordPress 2.0.3 has some security enhancements that a lot of people are wondering about, so here’s my attempt at explaining them.
Authentication: cookies are your backstage pass
When you sign into WordPress, you are granted a cookie… a little file that lives in your browser and acts as your “backstage pass” to the WordPress admin. This prevents unauthorized people from accessing your admin and doing bad things. They don’t have the cookie, so they’re stopped at the door by the bouncer. Your cookie is tied to your user account, which ties into the WordPress capabilities system which controls what things you can and can’t do in the admin. This is authentication: verifying that the person performing an admin action is authorized to do it.
Intention: the need to protect you from yourself
Say you’re logged in to your WordPress install. You can click links and submit forms that do…
Ver o post original 876 mais palavras