[wp-trac] Re: [WordPress Trac] #6871: Plugins without headers don't
show in the plugins page, keeping some exploits hidden
WordPress Trac
wp-trac at lists.automattic.com
Fri Jul 25 14:36:37 GMT 2008
#6871: Plugins without headers don't show in the plugins page, keeping some
exploits hidden
-------------------------------------------------------------------+--------
Reporter: guillep2k | Owner: guillep2k
Type: defect | Status: assigned
Priority: high | Milestone: 2.6.1
Component: Security | Version: 2.6
Severity: critical | Resolution:
Keywords: exploit security has-patch dev-feedback tested commit |
-------------------------------------------------------------------+--------
Comment (by azaozz):
Looks good, would stop certain type of exploits. One question: why use
srt_replace when only testing for false? Wouldn't another strpos do it a
bit faster like in 6871.5.
--
Ticket URL: <http://trac.wordpress.org/ticket/6871#comment:29>
WordPress Trac <http://trac.wordpress.org/>
WordPress blogging software
More information about the wp-trac
mailing list