[wp-trac] [WordPress Trac] #18593: WP Object Cache global can be easily hijacked, so some functions return fatal errors

WordPress Trac wp-trac at lists.automattic.com
Mon Sep 5 09:19:46 UTC 2011


#18593: WP Object Cache global can be easily hijacked, so some functions return
fatal errors
----------------------------+-----------------------------
 Reporter:  wonderboymusic  |      Owner:
     Type:  defect (bug)    |     Status:  new
 Priority:  normal          |  Milestone:  Awaiting Review
Component:  Cache           |    Version:  3.3
 Severity:  normal          |   Keywords:  has-patch
----------------------------+-----------------------------
 I noticed this when uploading images in Multisite mode with Memcached WP
 Object Cache backend installed - cache methods produce fatal errors
 because the $wp_object_cache global var has been hijacked and the
 competing class doesn't implement the same methods as the built-in WP
 cache class

 A good long-term solution would be to require any WP Object Cache class to
 implement the same interface (fat chance), so in the meantime, I have
 hardened all of the cache functions so they can't call a method that the
 referenced at runtime WP_Object_Cache class doesn't have

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/18593>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list