Getting Started

Security, logs are public

Home › Forums › Newsletter Plugin Support › Security, logs are public

Viewing 2 posts - 1 through 2 (of 2 total)
  • Author
    Posts
  • September 30, 2026 at 4:46 pm #359209
    User
    Participant

    Hi,
    even when not connected as Admin, the logs files are visible for all. exemple. urlSite/wp-content/logs/newsletter/antispam-2026-09-33d924e6.txt OR upgrade-2026-9.txt (with some admin informations in files)
    Off course i can mitigate this y adding Apache or Nginx restriction, but after that logs are not available via admin panel (403 error, this is logical)

    has someone get this problem too ?
    Thanks
    Franck

    October 6, 2026 at 12:06 pm #359342
    Michael
    Keymaster

    Hello Franck,

    usually the logs generated by Newsletter have an hash at the end of their filenames to make them non predictable, but I understand this may not be enough for everyone, from a security standpoint. I’ll talk to our devs about this, thanks for your feedback!

    Michael

  • Author
    Posts
Viewing 2 posts - 1 through 2 (of 2 total)
  • You must be logged in to reply to this topic.