[wp-trac] [WordPress Trac] #10205: getmyuid() called instead of posix_getuid() in get_filesystem_method() (wp-admin/includes/file.php)

[WordPress Trac]

#10205: getmyuid() called instead of posix_getuid() in get_filesystem_method() (wp-
admin/includes/file.php)
------------------------------------+-----------------------------
 Reporter:  pgl                     |       Owner:  dd32
     Type:  enhancement             |      Status:  reopened
 Priority:  normal                  |   Milestone:  Future Release
Component:  Filesystem              |     Version:  2.8
 Severity:  normal                  |  Resolution:
 Keywords:  has-patch dev-feedback  |
------------------------------------+-----------------------------

Comment (by dd32):

 > This current line says "hey, you have write permissions, but im going to
 fail you anyways". it doesnt make sense to me. PHP has full write access
 to a directory yet WP is denying it.

 Thats exactly it. PHP has full write access to the directoryy/files.

 Now, Your server might be setup correctly to allow this to work adequately
 and if that's the case, i encourage you to add `define('FS_METHOD',
 'direct';` to your wp-config.php file.

 However, In a large number of shared hosts, and a large number of servers,
 the server will not be setup like yours. The files will be writable by
 apache/php, however files created by apache will not be
 readable/modifiable by FTP users, or, files created by apache, will be
 ultimately writable to all users on the server (As every instance of PHP
 runs as the same user with no security)

 It's currently setup to protect users from their shitty hosts. you might
 not have this problem, a lot of the major us hosts may not have this
 problem, but a tonne of shared hosts out there DO have this problem. When
 you've got over 30 million installs around the globe, there's a lot of
 configurations you have to work around, in this case, selecting the lowest
 common denominator which is guaranteed to work is current choice.

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/10205#comment:18>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software