[wp-trac] [WordPress Trac] #48316: Changeset 46482 breaks upload when using ".." in upload_path.

[WordPress Trac]

#48316: Changeset 46482 breaks upload when using ".." in upload_path.
----------------------------+------------------------------
 Reporter:  xpoon           |       Owner:  (none)
     Type:  defect (bug)    |      Status:  reopened
 Priority:  normal          |   Milestone:  Awaiting Review
Component:  Filesystem API  |     Version:  5.2.4
 Severity:  normal          |  Resolution:
 Keywords:                  |     Focuses:
----------------------------+------------------------------

Comment (by mpcube):

 OK, is there a chance we can have a small bugfix for:

 - just UPLOADS-Constant
 - just on non-MU-installs
 - for just the directory (not modifing the URL)
 - just if UPLOADS already exists (means: just for the monthy folders)

 really soon? (Otherwise I need to figure out a way to create all those
 2019/12-direcories, because that's the only workaround I have right now.
 For november I made a script that did that on all the installs on one
 server, but I needed to log in to every server via ssh.)

 Other topics, like a solution for MU, a solution for upload_path-setting,
 getting rid of "../" in the URLs and unifying usage of UPLOADS and
 upload_path could be addressed in a later patch.

 I didn't expect having...

 1. WordPress (ABSPATH)
 2. customer's wp-content directory (WP_CONTENT_DIR) and
 3. the files in uploads (UPLOADS)

 ...in three sepreate direcories next to eachother to be so advanced, as
 having wordpress not writeable for my users, wp-content not writeable for
 the webserver and uplods not executableis a second line of defense i
 dont't want to miss - and managing them seperatly is convenient.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/48316#comment:29>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform