[wp-trac] [WordPress Trac] #41638: Must-Use Plugin File Still Available With a dot at the beginning of a filename (aka supposedly hidden)

[WordPress Trac]

#41638: Must-Use Plugin File Still Available With a dot at the beginning of a
filename (aka supposedly hidden)
-------------------------------------------------+-------------------------
 Reporter:  ronalfy                              |       Owner:  (none)
     Type:  defect (bug)                         |      Status:  new
 Priority:  normal                               |   Milestone:  Awaiting
                                                 |  Review
Component:  Plugins                              |     Version:  4.8.1
 Severity:  normal                               |  Resolution:
 Keywords:  has-patch needs-testing needs-       |     Focuses:
  refresh dev-feedback                           |  administration
-------------------------------------------------+-------------------------

Comment (by callumbw95):

 Hi All,
 I have just taken a look at this, and can confirm that this issue still
 exists, and will upload a refreshed patch shortly. For visibility I have
 attached a bug report too, to hopefully increase visibility on this
 ticket.

 == Bug Report
 === Description
 When a single php plugin file is hidden using the linux method by
 inserting a leading dot into the filename, WordPress will still include
 this file as a plugin.

 === Environment
 - WordPress: 6.9-alpha-60093-src
 - PHP: 8.4.7
 - Server: nginx/1.27.5
 - Database: mysqli (Server: 8.0.40 / Client: mysqlnd 8.4.7)
 - Browser: Chrome 137.0.0.0
 - OS: macOS
 - Theme: Twenty Seventeen 3.9
 - MU Plugins: None activated
 - Plugins:
   * Test Reports 1.2.0

 === Steps to Reproduce
 1. Insert a single php plugin into the mu-plugins directory.
 2. Rename the plugin so that it has a leading dot (.) into the file name.
 x. 🐞 Bug occurs.

 === Expected Results
 1.  ✅ Plugin should not appear in the mu-plugins list.

 === Actual Results
 1.  ❌ Plugin still appears, and in the case the meta is not included in
 the file the plugin name will show with the leading dot.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/41638#comment:3>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform