[wp-trac] [WordPress Trac] #35835: _deprecated_file undefined in rss-functions.php
WordPress Trac
noreply at wordpress.org
Thu Aug 29 02:38:01 UTC 2019
#35835: _deprecated_file undefined in rss-functions.php
-------------------------+-----------------------
Reporter: thib3113 | Owner: (none)
Type: enhancement | Status: reopened
Priority: normal | Milestone:
Component: General | Version: 4.4.2
Severity: normal | Resolution:
Keywords: | Focuses:
-------------------------+-----------------------
Changes (by flymike):
* status: closed => reopened
* type: defect (bug) => enhancement
* resolution: invalid =>
Comment:
Some hacker has discovered many of the WordPress files containing calls to
_deprecated_file() and is inundating my server with direct GET requests to
them.
Because that function is not defined in WordPress, Apache returns status
500 and - because, as an administrator, I want to be informed of status
500 - my inbox is deluged with alerts.
I would block the originating IPs but they'e all different, so coming from
spambots. And the advantage to the hacker eludes me completely - but it is
what it is, and I have to deal with it.
Couldn't WordPress handle calls to deprecated files/functions a little
more elegantly? Like it does with direct calls to other files which should
not be accessed directly - with status 200 and zero bytes?
--
Ticket URL: <https://core.trac.wordpress.org/ticket/35835#comment:8>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform
More information about the wp-trac
mailing list