[wp-trac] [WordPress Trac] #44710: Upload plugin and theme functionalities are not removing uploaded files after failure conditions.
WordPress Trac
noreply at wordpress.org
Fri Aug 3 00:11:59 UTC 2018
#44710: Upload plugin and theme functionalities are not removing uploaded files
after failure conditions.
----------------------------+-----------------------------
Reporter: rawrly | Owner: (none)
Type: defect (bug) | Status: new
Priority: normal | Milestone: Awaiting Review
Component: Administration | Version: 4.9.7
Severity: normal | Keywords:
Focuses: |
----------------------------+-----------------------------
Within wp-admin, an administrator user may upload files by using the
Upload Plugin functionality (Plugins -> Add New -> Upload plugin) and the
Upload Theme functionality (Appearance -> Themes -> Add New -> Upload
Theme)
These processes uploads the user submitted file to /wp-
content/uploads/{month} first, then attempts to extract it to the plugins
or theme directory (The form expects a .zip file, yet allows any mime-type
or extension for uploaded files, such as images, or .php files). If the
process fails for any reason the uploaded file remains in /wp-
content/uploads/ and/or /wp-content/upgrade/
It would be best if the plugin and theme upload functionalities properly
clean up the uploaded files if a plugin or theme fail to properly get
extracted and/or installed.
Note: On successful installations of a plugin or theme, the uploaded file
is being properly removed from /wp-content/uploads/ and/or /wp-
content/upgrade/
--
Ticket URL: <https://core.trac.wordpress.org/ticket/44710>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform
More information about the wp-trac
mailing list