• Is it possible for a user with ‘subscriber’ access to delete history logs via the WordPress back end?

    Alternatively is it possible for a user to delete user logs by accessing the log on the server?

    Dealing with a security breach of our site hence trying to figure out the path that was used.

Viewing 1 replies (of 1 total)
  • Plugin Author eskapism

    (@eskapism)

    Not in any way that I’m aware of. The settings page where the “Clear log”-button is located is only accessible by users with capability “manage_options”. Also, if a user was able to click the “Clear log” button there would be a message in the log that said that they cleared the log.

    If a user has admin access or access to the server or in any way can modify/add PHP code they can probably empty the log.

Viewing 1 replies (of 1 total)
  • The topic ‘Deleting Log Data’ is closed to new replies.