[wp-trac] [WordPress Trac] #2802: Ensure wp_handle_upload never leaves uploaded files world-writable

WordPress Trac wp-trac at lists.automattic.com
Thu Jun 8 10:45:38 GMT 2006


#2802: Ensure wp_handle_upload never leaves uploaded files world-writable
-----------------------+----------------------------------------------------
       Id:  2802       |      Status:  new                     
Component:  Security   |    Modified:  Thu Jun  8 10:45:38 2006
 Severity:  normal     |   Milestone:                          
 Priority:  normal     |     Version:  2.1                     
    Owner:  anonymous  |    Reporter:  Libertus                
-----------------------+----------------------------------------------------
 If I have to make my images directory world-writable to enable inline
 uploading, that doesn't mean I want the image files themselves world-
 writable. This patch ensures they never are.

-- 
Ticket URL: <http://trac.wordpress.org/ticket/2802>
WordPress Trac <http://wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list