[wp-trac] [WordPress Trac] #52443: Extra networkwide param in activate_plugin function
WordPress Trac
noreply at wordpress.org
Thu Feb 4 08:52:18 UTC 2021
#52443: Extra networkwide param in activate_plugin function
--------------------------+-----------------------------
Reporter: dam6pl | Owner: (none)
Type: defect (bug) | Status: new
Priority: normal | Milestone: Awaiting Review
Component: Plugins | Version:
Severity: normal | Keywords:
Focuses: |
--------------------------+-----------------------------
The issue is an extra $_GET parameter that is added in the
`activate_plugin` function.
{{{#!php
<?PHP //wp-admin/includes/plugin.php:639
$_GET['networkwide'] = 1;
}}}
In my case, I had been using the `activate_plugin` function in the `mu-
plugins` directory to protect some plugins against deactivation.
As a result, this parameter had an impact on the OAuth authorization
process in one of the plugins because this `networkwide` has been used to
build the signature.
I know the size of the potential impact is really small but in my opinion,
this parameter should be unset at the end of the function.
--
Ticket URL: <https://core.trac.wordpress.org/ticket/52443>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform
More information about the wp-trac
mailing list