[wp-trac] [WordPress Trac] #20195: Plugins uninstall.php

[WordPress Trac]

#20195: Plugins uninstall.php
--------------------------+------------------------------
 Reporter:  wpsmith       |       Owner:
     Type:  enhancement   |      Status:  new
 Priority:  normal        |   Milestone:  Awaiting Review
Component:  Plugins       |     Version:
 Severity:  major         |  Resolution:
 Keywords:  dev-feedback  |
--------------------------+------------------------------

Comment (by nacin):

 Replying to [comment:4 lightningspirit]:
 > As they have access to a fully loaded WordPress environment they can
 ''fully'' execute uninstall.php. That can be a security break. I think we
 should check for referer or use the nonces API too...

 No, this is not a security breach. The security breach is having access to
 a fully loaded environment in the first place. Once they are there, they
 can also fully execute raw database queries and delete files all they
 want. Forget uninstall.php, how about $wpdb->query("DROP TABLE
 $wpdb->posts")?

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/20195#comment:5>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software