[wp-trac] [WordPress Trac] #10551: wp_die() triggers block when using ModSecurity Core Rules

WordPress Trac wp-trac at lists.automattic.com
Sat Jan 22 09:07:08 UTC 2011


#10551: wp_die() triggers block when using ModSecurity Core Rules
------------------------------------------------+--------------------------
 Reporter:  cstrosser                           |       Owner:  westi
     Type:  defect (bug)                        |      Status:  accepted
 Priority:  normal                              |   Milestone:  Future
Component:  Security                            |  Release
 Severity:  normal                              |     Version:  2.8.3
 Keywords:  needs-patch 3.2-early dev-feedback  |  Resolution:
------------------------------------------------+--------------------------

Comment (by solarissmoke):

 Replying to [comment:15 nacin]:
 > Don't think we should change the default.

 Okay. How about just adding a `wp_forbid` function which issues a 403? -
 that seems the most appropriate for a number of current uses of `wp_die` -
 anything more can be added as/when needed in the future.

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/10551#comment:16>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list