[wp-trac] [WordPress Trac] #30802: PHP Segfault with SSH2 prevents General Settings page loading

[WordPress Trac]

#30802: PHP Segfault with SSH2 prevents General Settings page loading
-------------------------------------+-----------------------
 Reporter:  hyoseop                  |       Owner:  dd32
     Type:  defect (bug)             |      Status:  reopened
 Priority:  normal                   |   Milestone:  4.1.2
Component:  Filesystem API           |     Version:  4.1
 Severity:  normal                   |  Resolution:
 Keywords:  needs-patch fixed-major  |     Focuses:
-------------------------------------+-----------------------

Comment (by jobst):

 I am not sure why the installer of wordpress does not simply create "wp-
 content/languages".

 If you look at the 100's of lines of code (and the CPU cycles wasted) to
 "find" the directory it would be IMHO a very good idea to create the
 directory right from the install onwards.

 If you consider that most security conscious people would have the owner
 of the wordpress tree be a different UID of the user running apache then
 just consider how many directries find_folder and search_for_folder go
 through to find "languages", which even includes the home directory of the
 OWNER (never ever should this be touched) - only at the end not to find it
 at all!

 I am not sure whether this is a security problem as well considering while
 this is runnning it looks at some files that are outside the wordpress
 tree ...

 Please Wordpress, consider making it part of the installer!


 Jobst

--
Ticket URL: <https://core.trac.wordpress.org/ticket/30802#comment:18>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform