[wp-trac] [WordPress Trac] #48316: Changeset 46482 breaks upload when using ".." in upload_path.

WordPress Trac noreply at wordpress.org
Tue Oct 22 05:33:39 UTC 2019


#48316: Changeset 46482 breaks upload when using ".." in upload_path.
----------------------------+---------------------
 Reporter:  xpoon           |       Owner:  (none)
     Type:  defect (bug)    |      Status:  new
 Priority:  normal          |   Milestone:  5.2.5
Component:  Filesystem API  |     Version:  trunk
 Severity:  major           |  Resolution:
 Keywords:                  |     Focuses:
----------------------------+---------------------

Comment (by xpoon):

 Hi Clorith,

 Using absolute paths in the database is a thing we would like to avoid, as
 it makes it much harder to move the site internally as well as for our
 customers to move the site to other providers.

 If we are the only one affected by this I have no problem with you just
 closing this ticket. I'm sure we can find some workaround. But if other is
 affected too (I guess you will notice in the beginning of november when
 new catalogues are to be created) it would be nice too see this change be
 implemented in a more sensible way.

 I have seen no depreciation warning and no mentions in any changelog about
 this. Does this change patch any known vulnerability, or what was the
 reason this was implemented in the first place?

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/48316#comment:6>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list