[wp-trac] [WordPress Trac] #35835: _deprecated_file undefined in rss-functions.php

WordPress Trac noreply at wordpress.org
Thu Aug 29 02:38:01 UTC 2019


#35835: _deprecated_file undefined in rss-functions.php
-------------------------+-----------------------
 Reporter:  thib3113     |       Owner:  (none)
     Type:  enhancement  |      Status:  reopened
 Priority:  normal       |   Milestone:
Component:  General      |     Version:  4.4.2
 Severity:  normal       |  Resolution:
 Keywords:               |     Focuses:
-------------------------+-----------------------
Changes (by flymike):

 * status:  closed => reopened
 * type:  defect (bug) => enhancement
 * resolution:  invalid =>


Comment:

 Some hacker has discovered many of the WordPress files containing calls to
 _deprecated_file() and is inundating my server with direct GET requests to
 them.
 Because that function is not defined in WordPress, Apache returns status
 500 and - because, as an administrator, I want to be informed of status
 500 - my inbox is deluged with alerts.
 I would block the originating IPs but they'e all different, so coming from
 spambots. And the advantage to the hacker eludes me completely - but it is
 what it is, and I have to deal with it.
 Couldn't WordPress handle calls to deprecated files/functions a little
 more elegantly? Like it does with direct calls to other files which should
 not be accessed directly - with status 200 and zero bytes?

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/35835#comment:8>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list