[wp-trac] [WordPress Trac] #44710: Upload plugin and theme functionalities are not removing uploaded files after failure conditions.

WordPress Trac noreply at wordpress.org
Fri Aug 3 00:11:59 UTC 2018


#44710: Upload plugin and theme functionalities are not removing uploaded files
after failure conditions.
----------------------------+-----------------------------
 Reporter:  rawrly          |      Owner:  (none)
     Type:  defect (bug)    |     Status:  new
 Priority:  normal          |  Milestone:  Awaiting Review
Component:  Administration  |    Version:  4.9.7
 Severity:  normal          |   Keywords:
  Focuses:                  |
----------------------------+-----------------------------
 Within wp-admin, an administrator user may upload files by using the
 Upload Plugin functionality (Plugins -> Add New -> Upload plugin) and the
 Upload Theme functionality (Appearance -> Themes -> Add New -> Upload
 Theme)

 These processes uploads the user submitted file to /wp-
 content/uploads/{month} first, then attempts to extract it to the plugins
 or theme directory (The form expects a .zip file, yet allows any mime-type
 or extension for uploaded files, such as images, or .php files). If the
 process fails for any reason the uploaded file remains in /wp-
 content/uploads/ and/or /wp-content/upgrade/

 It would be best if the plugin and theme upload functionalities properly
 clean up the uploaded files if a plugin or theme fail to properly get
 extracted and/or installed.

 Note: On successful installations of a plugin or theme, the uploaded file
 is being properly removed from /wp-content/uploads/ and/or /wp-
 content/upgrade/

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/44710>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list