[wp-trac] [WordPress Trac] #37680: PHP Warning: ini_get_all() has been disabled for security reasons

WordPress Trac noreply at wordpress.org
Wed Aug 17 22:18:23 UTC 2016


#37680: PHP Warning: ini_get_all() has been disabled for security reasons
----------------------------+--------------------
 Reporter:  dd32            |       Owner:
     Type:  defect (bug)    |      Status:  new
 Priority:  normal          |   Milestone:  4.6.1
Component:  Bootstrap/Load  |     Version:  4.6
 Severity:  normal          |  Resolution:
 Keywords:  has-patch       |     Focuses:
----------------------------+--------------------

Comment (by dd32):

 Replying to [comment:2 blobaugh]:
 > I think we should follow in line here an return a false value. That will
 signify a possible issue with the call. Alternatively it could return a
 `WP_Error` if having the `ini_*` functions available is a hard
 requirement.

 The problem is that `ini_set()` and `ini_get()` are most likely available,
 it's just that `ini_get_all()` is disabled which causes an inability to
 determine if the `ini_set()` will pass or not.

 `WP_Error` (which went unchecked) or `null` could be also used thanks to
 core using strict type checking on the call (for some reason) - (`true`:
 changeable, `false`: not changeable, `null` or `WP_Error`: who knows).
 We'd still only want to bail in the event it was `false` and not `null` or
 `WP_Error` though.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/37680#comment:5>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list