[wp-trac] [WordPress Trac] #52980: PHP notice on login page (without login) (was: This Bug Show Directory from admin panel login page ( without login ))
WordPress Trac
noreply at wordpress.org
Tue Apr 6 18:36:02 UTC 2021
#52980: PHP notice on login page (without login)
------------------------------------+---------------------
Reporter: satrancali | Owner: (none)
Type: defect (bug) | Status: new
Priority: normal | Milestone: 5.8
Component: Login and Registration | Version: 2.9
Severity: normal | Resolution:
Keywords: | Focuses:
------------------------------------+---------------------
Changes (by SergeyBiryukov):
* component: General => Login and Registration
* version: 5.7 => 2.9
* milestone: Awaiting Review => 5.8
Comment:
Hi there, welcome to WordPress Trac! Thanks for the report.
Just to clarify, path disclosure is considered a
[https://make.wordpress.org/core/handbook/testing/reporting-security-
vulnerabilities/#why-are-there-path-disclosures-when-directly-loading-
certain-files server configuration issue] in WordPress, and not a security
issue.
We should fix the PHP notice, though. This is not new in 5.7 and appears
to be originally introduced in [11801] and further adjusted in [15710] and
[29327], changing the Version field accordingly.
--
Ticket URL: <https://core.trac.wordpress.org/ticket/52980#comment:1>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform
More information about the wp-trac
mailing list