[wp-trac] [WordPress Trac] #51170: FTP automatic updates are not RFC 959 compliant for NLST command

WordPress Trac noreply at wordpress.org
Fri Aug 28 07:07:08 UTC 2020


#51170: FTP automatic updates are not RFC 959 compliant for NLST command
--------------------------+-----------------------------
 Reporter:  giox069       |      Owner:  (none)
     Type:  defect (bug)  |     Status:  new
 Priority:  normal        |  Milestone:  Awaiting Review
Component:  General       |    Version:  trunk
 Severity:  normal        |   Keywords:
  Focuses:                |
--------------------------+-----------------------------
 Wordpress uses FTP NLST command to check if a file exists:
 https://developer.wordpress.org/reference/classes/wp_filesystem_ftpsockets/exists/

 But according RFC 959, NLST is not intended to be applied to a file.

 Many ftp servers are permissive, and allowed to execute NLST on files. But
 a recent update to pure-ftpd removed support for this wordpress non-rfc
 compliant behaviour.
 https://github.com/jedisct1/pure-
 ftpd/commit/dc71ecfc39a6258d9e49b9918b600a9d46365358

 Wordpress should adhere to RFC 959, and check FTP file existence in a
 different way than NLST command, for example using RFC 3659 commands, and
 then falling back to NLST if RFC 3659 commands are not available.

 Wordpress should also warn the user and stop processing when NLST fails.

 See my post here:
 https://wordpress.org/support/topic/problems-installing-plugins-and-
 upgrading-with-newer-pure-ftpd/

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/51170>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list