Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

The organization I work for is rolling out a Wordpress Multi-User install for it's members to have a "Personal Mini-Website/Blog," that will be hosted on our main organization's website. They are looking at using a Wordpress plugin which would allow users to comment on the blogs via Facebook Connect.

I wanted to hear your thoughts on what the risks of using Facebook Connect in this type of a scenario would be. (Or any scenario, really)

From both a SysAdmin & a Dev viewpoint.

share|improve this question

closed as too broad by masegaloeh, mdpc, HopelessN00b Mar 8 '15 at 9:52

There are either too many possible answers, or good answers would be too long for this format. Please add details to narrow the answer set or to isolate an issue that can be answered in a few paragraphs.If this question can be reworded to fit the rules in the help center, please edit the question.

It means Facebook can impersonate any of your users, and if a flaw in their login process is ever discovered then it may be exploited by a malicious person to login as anyone they want. – user186340 Mar 7 '15 at 17:03
up vote 0 down vote accepted

My understanding of Facebook connect is that it adds an option for Facebook users to login to your blog and make comments. The API also lets you see your WP comments in Facebook (and I believe viceversa). I don't think this would be a security issue unless you were planning in making some blogs restricted.

If your concern is more about the actual API and how secure it is, you might want to post this in StackOverflow ( it would be more of a programmer type question)

share|improve this answer
Yes, I might do that. Thanks! – Josh Brower Jun 18 '09 at 20:42

Not the answer you're looking for? Browse other questions tagged or ask your own question.