[wp-trac] [WordPress Trac] #48316: Changeset 46482 breaks upload when using ".." in upload_path.
WordPress Trac
noreply at wordpress.org
Mon Nov 25 11:41:43 UTC 2019
#48316: Changeset 46482 breaks upload when using ".." in upload_path.
----------------------------+------------------------------
Reporter: xpoon | Owner: (none)
Type: defect (bug) | Status: reopened
Priority: normal | Milestone: Awaiting Review
Component: Filesystem API | Version: 5.2.4
Severity: major | Resolution:
Keywords: | Focuses:
----------------------------+------------------------------
Changes (by mpcube):
* Attachment "48316-minimal-realpath-fix.diff" added.
Minimal fix using realpath(): Just for UPLOADS constant, not for option
'siteurl', as siteurl can be absolute. Just for directory, nor for URL, as
'../' in URL ist ugly, but nor a showstopper
--
Ticket URL: <https://core.trac.wordpress.org/ticket/48316>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform
More information about the wp-trac
mailing list