Prefix specified for tables is not used for creating tables in wordpress database

Follow

Comments

4 comments

  • Avatar
    Paul Scarrott

    This is still not working. We are on Plesk Onyx 17.5.3 and it is still using a random series of letters and numbers when setting up the database, regardless of what we put in the form.

  • Avatar
    Bulat Tsydenov

    @Paul, I've just checked it in a test environment and it was not reproduced, the table prefix was set the same as I defined. Can you please clarify the OS version?

  • Avatar
    Paul Scarrott

    I've just tested it again and it is definitely still happening. Here's the settings I used...

    And here's the resulting database...

    Server info shows:

    Version Plesk Onyx v17.5.3_build1705170317.16 os_CentOS 7
    OS CentOS Linux 7.4.1708 (Core)
  • Avatar
    Konstantin Annikov

    @Paul, 

    "wp_" prefix for WordPress databases is not secure:
    By default, installation sets “wp_” as a prefix for each WordPress table name. Since this is a known vulnerability, malicious users can exploit your data easily. Attackers can easily send malicious code using JavaScript injecting SQL targeting your wp_ based tables. Through wp_options they can set the url to redirect to their sites, leaving you the impression that your site was defaced.

    We strongly do not recommend you to use this prefix. And that is why Plesk's WordPress toolkit automatically regenerates such prefix to more secured one. 

    With other prefixes WordPress ToolKit works fine. 

Please sign in to leave a comment.