[wp-trac] [WordPress Trac] #48316: Changeset 46482 breaks upload when using ".." in upload_path.
WordPress Trac
noreply at wordpress.org
Tue Oct 22 05:33:39 UTC 2019
#48316: Changeset 46482 breaks upload when using ".." in upload_path.
----------------------------+---------------------
Reporter: xpoon | Owner: (none)
Type: defect (bug) | Status: new
Priority: normal | Milestone: 5.2.5
Component: Filesystem API | Version: trunk
Severity: major | Resolution:
Keywords: | Focuses:
----------------------------+---------------------
Comment (by xpoon):
Hi Clorith,
Using absolute paths in the database is a thing we would like to avoid, as
it makes it much harder to move the site internally as well as for our
customers to move the site to other providers.
If we are the only one affected by this I have no problem with you just
closing this ticket. I'm sure we can find some workaround. But if other is
affected too (I guess you will notice in the beginning of november when
new catalogues are to be created) it would be nice too see this change be
implemented in a more sensible way.
I have seen no depreciation warning and no mentions in any changelog about
this. Does this change patch any known vulnerability, or what was the
reason this was implemented in the first place?
--
Ticket URL: <https://core.trac.wordpress.org/ticket/48316#comment:6>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform
More information about the wp-trac
mailing list