WordPress.org

Plugin Directory

wp-db-backup

Opened 8 years ago

Closed 15 months ago

#596 closed enhancement (wontfix)

specify backup directory

Reported by: filosofo Owned by: filosofo
Priority: normal Severity: normal
Plugin: wp-db-backup Keywords: wp-db-backup
Cc:

Description

allow users to specify the backup directory

Change History (1)

comment:1 @Dennison Williams15 months ago

  • Resolution set to wontfix
  • Status changed from new to closed

This is also a security vulnerability as there is no protection created for the backup directory and sql dumps can contain data from the wp_users table. In addition the format for backup directories can be brute forced to obtain database dumps on servers where this is installed.

Fortunately you can customize this by editing wp-db-backup.php and defining a location for backups outside of your document root.

/**
 * Change WP_BACKUP_DIR if you want to
 * use a different backup location
 */
define("WP_BACKUP_DIR", "/home/user/wp-db-backups");
Note: See TracTickets for help on using tickets.