[wp-trac] [WordPress Trac] #41999: /wp-includes/theme-compat/embed.php causes unnecessary errors in request log

[WordPress Trac]

#41999: /wp-includes/theme-compat/embed.php causes unnecessary errors in request
log
--------------------------+-----------------------------
 Reporter:  arjenlentz    |      Owner:
     Type:  defect (bug)  |     Status:  new
 Priority:  normal        |  Milestone:  Awaiting Review
Component:  General       |    Version:  4.8.2
 Severity:  normal        |   Keywords:
  Focuses:                |
--------------------------+-----------------------------
 FastCGI sent in stderr: "PHP message: PHP Fatal error:  Call to undefined
 function get_header() in [...]/wp-includes/theme-compat/embed.php on line
 13"

 It's being called directly: "GET /wp-includes/theme-compat/embed.php
 HTTP/1.1"
 Of course people shouldn't, but they do, for a purpose: to derive certain
 information or find vulnerabilities.
 It also clutters error logs, which may cause real errors to get missed.


 Other WP include and plugin files that contain direct code (rather than
 only function/class definitions), have a catch for this:

  if ( ! defined( 'ABSPATH' ) ) {
          exit; // Exit if accessed directly.
  }

 I suggest this gets added to the top of the /wp-includes/theme-
 compat/embed.php file.
 Easy fix.
 thanks

--
Ticket URL: <https://core.trac.wordpress.org/ticket/41999>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform