[wp-trac] [WordPress Trac] #37680: PHP Warning: ini_get_all() has been disabled for security reasons
WordPress Trac
noreply at wordpress.org
Wed Aug 17 22:18:23 UTC 2016
#37680: PHP Warning: ini_get_all() has been disabled for security reasons
----------------------------+--------------------
Reporter: dd32 | Owner:
Type: defect (bug) | Status: new
Priority: normal | Milestone: 4.6.1
Component: Bootstrap/Load | Version: 4.6
Severity: normal | Resolution:
Keywords: has-patch | Focuses:
----------------------------+--------------------
Comment (by dd32):
Replying to [comment:2 blobaugh]:
> I think we should follow in line here an return a false value. That will
signify a possible issue with the call. Alternatively it could return a
`WP_Error` if having the `ini_*` functions available is a hard
requirement.
The problem is that `ini_set()` and `ini_get()` are most likely available,
it's just that `ini_get_all()` is disabled which causes an inability to
determine if the `ini_set()` will pass or not.
`WP_Error` (which went unchecked) or `null` could be also used thanks to
core using strict type checking on the call (for some reason) - (`true`:
changeable, `false`: not changeable, `null` or `WP_Error`: who knows).
We'd still only want to bail in the event it was `false` and not `null` or
`WP_Error` though.
--
Ticket URL: <https://core.trac.wordpress.org/ticket/37680#comment:5>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform
More information about the wp-trac
mailing list