[wp-trac] [WordPress Trac] #12201: getmyuid() is disabled - workaround

WordPress Trac wp-trac at lists.automattic.com
Sun Mar 14 00:54:02 UTC 2010


#12201: getmyuid() is disabled - workaround
--------------------------------+-------------------------------------------
 Reporter:  edward mindreantre  |       Owner:  dd32                   
     Type:  defect (bug)        |      Status:  accepted               
 Priority:  normal              |   Milestone:  3.0                    
Component:  Filesystem          |     Version:  2.9.2                  
 Severity:  normal              |    Keywords:  has-patch needs-testing
--------------------------------+-------------------------------------------

Old description:

> On some web hosts the getmyuid() function, used in file.php to discern
> whether direct access to the file system is allowed or not, is disabled.
> "For security reasons", whatever the fuck that might mean. How much
> damage can you cause with getmyuid?
>
> This prevents people who, even though they've installed wordpress
> correctly via FTP and set the correct file permissions, from installing
> themes, plugins and upgrades.
>
> Sad but true.
>
> Here's a workaround.

New description:

 On some web hosts the getmyuid() function, used in file.php to discern
 whether direct access to the file system is allowed or not, is disabled.
 "For security reasons", whatever that might mean. How much damage can you
 cause with getmyuid?

 This prevents people who, even though they've installed wordpress
 correctly via FTP and set the correct file permissions, from installing
 themes, plugins and upgrades.

 Sad but true.

 Here's a workaround.

--

Comment(by nacin):

 Removing language.

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/12201#comment:5>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list