[wp-trac] [WordPress Trac] #10205: getmyuid() called instead of posix_getuid() in get_filesystem_method() (wp-admin/includes/file.php)
WordPress Trac
noreply at wordpress.org
Mon Oct 27 10:24:32 UTC 2014
#10205: getmyuid() called instead of posix_getuid() in get_filesystem_method() (wp-
admin/includes/file.php)
------------------------------------+-----------------------------
Reporter: pgl | Owner: dd32
Type: enhancement | Status: reopened
Priority: normal | Milestone: Future Release
Component: Filesystem API | Version: 2.8
Severity: normal | Resolution:
Keywords: has-patch dev-feedback | Focuses:
------------------------------------+-----------------------------
Comment (by obenbeimutti):
Yeah, very annoying bug. I only registered to create a ticket for this
bug.
Obviously the file ownership test is completly wrong. The only thing that
matters is, that you can write on that folder.
"We're *not* simply removing the check for file ownership. The prospect of
having us create a file that the FTP user can't edit is very bad."
Yeah that is very bad, but it is not your responsibility. The person which
sets up the ftp server should handle that problem, which indeed is not
really a problem.
By the way, who uses FTP? Security issues! Heard about SFTP?
When it comes to deployment it seems, wordpress is lightyears behind
technology. Absolute urls written into the database, is another huge
problem. No professional developer uses such a technique.
--
Ticket URL: <https://core.trac.wordpress.org/ticket/10205#comment:38>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform
More information about the wp-trac
mailing list