[wp-trac] [WordPress Trac] #51170: FTP automatic updates are not RFC 959 compliant for NLST command
WordPress Trac
noreply at wordpress.org
Fri Aug 28 07:07:08 UTC 2020
#51170: FTP automatic updates are not RFC 959 compliant for NLST command
--------------------------+-----------------------------
Reporter: giox069 | Owner: (none)
Type: defect (bug) | Status: new
Priority: normal | Milestone: Awaiting Review
Component: General | Version: trunk
Severity: normal | Keywords:
Focuses: |
--------------------------+-----------------------------
Wordpress uses FTP NLST command to check if a file exists:
https://developer.wordpress.org/reference/classes/wp_filesystem_ftpsockets/exists/
But according RFC 959, NLST is not intended to be applied to a file.
Many ftp servers are permissive, and allowed to execute NLST on files. But
a recent update to pure-ftpd removed support for this wordpress non-rfc
compliant behaviour.
https://github.com/jedisct1/pure-
ftpd/commit/dc71ecfc39a6258d9e49b9918b600a9d46365358
Wordpress should adhere to RFC 959, and check FTP file existence in a
different way than NLST command, for example using RFC 3659 commands, and
then falling back to NLST if RFC 3659 commands are not available.
Wordpress should also warn the user and stop processing when NLST fails.
See my post here:
https://wordpress.org/support/topic/problems-installing-plugins-and-
upgrading-with-newer-pure-ftpd/
--
Ticket URL: <https://core.trac.wordpress.org/ticket/51170>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform
More information about the wp-trac
mailing list