[wp-trac] [WordPress Trac] #39309: Secure WordPress Against Infrastructure Attacks

WordPress Trac noreply at wordpress.org
Thu Apr 18 13:26:51 UTC 2019


#39309: Secure WordPress Against Infrastructure Attacks
------------------------------------------+-----------------------
 Reporter:  paragoninitiativeenterprises  |       Owner:  pento
     Type:  task (blessed)                |      Status:  assigned
 Priority:  normal                        |   Milestone:  5.2
Component:  Upgrade/Install               |     Version:  4.8
 Severity:  critical                      |  Resolution:
 Keywords:  has-patch                     |     Focuses:
------------------------------------------+-----------------------

Comment (by dd32):

 Replying to [comment:81 johnbillion]:
 > @dd32 FYI `opcache_get_status()` isn't reliable as it's commonly blocked
 by the `restrict_api` directive which means its return value can be false
 when the opcode cache is in use, and it also spits out a PHP warning.

 That's the kind of thing I was expecting :(

 In that case, an updated patch using `extension_loaded( 'opcache' )` will
 be uploaded tomorrow, even if the cache is disabled, that small segment of
 users has to miss out.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/39309#comment:82>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list