Wordfence on "[Plugin: Wordfence Security] Change database prefix table"

Hi Andrez,

I'll explain:

You need to ask: Why would I want to change the prefix of my database tables?

Because if a hacker does SQL injection they will not know my table names and so they won't know what table name to include in the SQL statement.

But if they can do SQL injection, they can just run the "show tables" SQL command and get your list of tables anyway. So that makes changing the table prefix completely pointless.

Also, if they can do SQL injection, you need to fix the plugin, theme or file that is allowing SQL injection, rather than trying to work around it.

Does that make sense?

Regards,

Mark.