[wp-trac] [WordPress Trac] #29236: install_plugins_tabs cannot filter the "upload" tab anymore

WordPress Trac noreply at wordpress.org
Sun Aug 17 12:06:19 UTC 2014


#29236: install_plugins_tabs cannot filter the "upload" tab anymore
--------------------------+--------------------
 Reporter:  juliobox      |       Owner:
     Type:  defect (bug)  |      Status:  new
 Priority:  normal        |   Milestone:  4.0
Component:  Plugins       |     Version:  trunk
 Severity:  normal        |  Resolution:
 Keywords:  has-patch     |     Focuses:
--------------------------+--------------------

Comment (by juliobox):

 Hello

 Thank you Sergey.

 hi Andrew, i'm aware of this (as a Web Security Consultant). My entire
 little script also contains this :
 {{{
 if( isset( $_FILES['pluginzip'] ) || isset( $_FILES['themezip'] ) )
         die( 'You are not allowed to to that.' );
 }}}

 So, i guess it's enought to avoid a plugin/theme to be added by zip.

 See you soon

--
Ticket URL: <https://core.trac.wordpress.org/ticket/29236#comment:3>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list