[wp-trac] [WordPress Trac] #52443: Extra networkwide param in activate_plugin function

WordPress Trac noreply at wordpress.org
Thu Feb 4 08:52:18 UTC 2021


#52443: Extra networkwide param in activate_plugin function
--------------------------+-----------------------------
 Reporter:  dam6pl        |      Owner:  (none)
     Type:  defect (bug)  |     Status:  new
 Priority:  normal        |  Milestone:  Awaiting Review
Component:  Plugins       |    Version:
 Severity:  normal        |   Keywords:
  Focuses:                |
--------------------------+-----------------------------
 The issue is an extra $_GET parameter that is added in the
 `activate_plugin` function.

 {{{#!php
 <?PHP //wp-admin/includes/plugin.php:639
 $_GET['networkwide'] = 1;
 }}}

 In my case, I had been using the  `activate_plugin` function in the `mu-
 plugins` directory to protect some plugins against deactivation.

 As a result, this parameter had an impact on the OAuth authorization
 process in one of the plugins because this `networkwide` has been used to
 build the signature.

 I know the size of the potential impact is really small but in my opinion,
 this parameter should be unset at the end of the function.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/52443>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list