[wp-trac] [WordPress Trac] #19009: wpmu_delete_blog() can wipe out an entire network

WordPress Trac wp-trac at lists.automattic.com
Thu Oct 20 16:55:19 UTC 2011


#19009: wpmu_delete_blog() can wipe out an entire network
--------------------------+------------------
 Reporter:  nacin         |       Owner:
     Type:  defect (bug)  |      Status:  new
 Priority:  normal        |   Milestone:  3.3
Component:  Multisite     |     Version:  3.0
 Severity:  critical      |  Resolution:
 Keywords:                |
--------------------------+------------------

Comment (by nacin):

 I think we should also prevent $force when `$current_site->path ==
 $blog->path && $current_site->domain == $blog->domain`. When this site
 disappears, the network admin will likely not work, and startup might
 fail.

 Ideally we need to make this more explicit, such as denying the ability to
 delete these blogs in the UI (at the cap level, perhaps). Perhaps a better
 API distinction needs to be made with is_main_site(), the root
 domain/path, and blog_id 1, which can all be different.

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/19009#comment:4>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list