Re:Blog post id enumeration can lead to unwanted information...
by blowski on Monday February 29, 2016 @04:40AM
(#11194473)
If you're using nginx, I'm fairly sure you can do an 'internal' directive so that `?id=12345` style URLs won't work when you try typing them in a browser, but nginx can still rewrite the URLs to map slugs to IDs.
I haven't tried it with WordPress, but I did do something similar on a custom CMS.
That said, there are better approaches. You can use a plugin to set publish dates in the future, and before that the page will return a 404 (unless you're logged in).
I haven't tried it with WordPress, but I did do something similar on a custom CMS.
That said, there are better approaches. You can use a plugin to set publish dates in the future, and before that the page will return a 404 (unless you're logged in).