Ticket #63137: 63137.6.patch

src/wp-admin/edit-comments.php

@@ -30 +30 @@
                  */
                 global $wpdb;
 
-                $comment_status = wp_unslash( $_REQUEST['comment_status'] );
-                $delete_time    = wp_unslash( $_REQUEST['pagegen_timestamp'] );
+                $comment_status = isset( $_REQUEST['comment_status'] ) ? wp_unslash( $_REQUEST['comment_status'] ) : '';
+                $delete_time    = isset( $_REQUEST['pagegen_timestamp'] ) ? wp_unslash( $_REQUEST['pagegen_timestamp'] ) : '';
                 $comment_ids    = $wpdb->get_col(
                         $wpdb->prepare(
                                 "SELECT comment_ID FROM $wpdb->comments
@@ -150 +150 @@
         wp_safe_redirect( $redirect_to );
         exit;
 } elseif ( ! empty( $_GET['_wp_http_referer'] ) ) {
-        wp_redirect( remove_query_arg( array( '_wp_http_referer', '_wpnonce' ), wp_unslash( $_SERVER['REQUEST_URI'] ) ) );
-        exit;
+
+        // Check REQUEST URI is set and not empty.
+        if( isset( $_SERVER['REQUEST_URI'] ) && ! empty( $_SERVER['REQUEST_URI'] ) ) {
+                wp_redirect( remove_query_arg( array( '_wp_http_referer', '_wpnonce' ), wp_unslash( $_SERVER['REQUEST_URI'] ) ) );
+                exit;
+        }
 }
 
 $wp_list_table->prepare_items();

src/wp-admin/load-styles.php

@@ -29 +29 @@
 require ABSPATH . WPINC . '/script-loader.php';
 require ABSPATH . WPINC . '/version.php';
 
-$protocol = $_SERVER['SERVER_PROTOCOL'];
-if ( ! in_array( $protocol, array( 'HTTP/1.1', 'HTTP/2', 'HTTP/2.0', 'HTTP/3' ), true ) ) {
-        $protocol = 'HTTP/1.0';
+// Check SERVER_PROTOCOL isset and not empty.
+if ( isset( $_SERVER['SERVER_PROTOCOL'] ) && ! empty( $_SERVER['SERVER_PROTOCOL'] ) ) {
+        if ( ! in_array( $protocol, array( 'HTTP/1.1', 'HTTP/2', 'HTTP/2.0', 'HTTP/3' ), true ) ) {
+                $protocol = 'HTTP/1.0';
+        }
+}
+
+// Check Get Load Parameter isset and not empty.
+if ( ! isset( $_GET['load'] ) || empty( $_GET['load'] ) ) {
+        $load = $_GET['load'];
 }
 
-$load = $_GET['load'];
 if ( is_array( $load ) ) {
         ksort( $load );
         $load = implode( '', $load );

src/wp-includes/class-wp-customize-manager.php

@@ -4575 +4575 @@
          * @return bool Whether the user agent is iOS.
          */
         public function is_ios() {
-                return wp_is_mobile() && preg_match( '/iPad|iPod|iPhone/', $_SERVER['HTTP_USER_AGENT'] );
+                // Check HTTP_USER_AGENT isset and not empty.
+                if( isset( $_SERVER['HTTP_USER_AGENT'] ) && ! empty( $_SERVER['HTTP_USER_AGENT'] ) ) {
+                        return wp_is_mobile() && preg_match( '/iPad|iPod|iPhone/', $_SERVER['HTTP_USER_AGENT'] );
+                } else {
+                        // If HTTP_USER_AGENT is not set, assume not iOS.
+                        return false;
+                }
         }
 
         /**

src/wp-includes/vars.php

@@ -28 +28 @@
 if ( is_admin() ) {
         // wp-admin pages are checked more carefully.
         if ( is_network_admin() ) {
-                preg_match( '#/wp-admin/network/?(.*?)$#i', $_SERVER['PHP_SELF'], $self_matches );
+
+                // Check PHP_SELF isset before using it.
+                if( isset( $_SERVER['PHP_SELF'] ) && ! empty( $_SERVER['PHP_SELF'] ) ) {
+                        preg_match( '#/wp-admin/network/?(.*?)$#i', $_SERVER['PHP_SELF'], $self_matches );
+                }
         } elseif ( is_user_admin() ) {
-                preg_match( '#/wp-admin/user/?(.*?)$#i', $_SERVER['PHP_SELF'], $self_matches );
+                // Check PHP_SELF isset before using it.
+                if( isset( $_SERVER['PHP_SELF'] ) && ! empty( $_SERVER['PHP_SELF'] ) ) {
+                        preg_match( '#/wp-admin/user/?(.*?)$#i', $_SERVER['PHP_SELF'], $self_matches );
+                }
         } else {
-                preg_match( '#/wp-admin/?(.*?)$#i', $_SERVER['PHP_SELF'], $self_matches );
+                // Check PHP_SELF isset before using it.
+                if( isset( $_SERVER['PHP_SELF'] ) && ! empty( $_SERVER['PHP_SELF'] ) ) {
+                        preg_match( '#/wp-admin/?(.*?)$#i', $_SERVER['PHP_SELF'], $self_matches );
+                }
         }
 
         $pagenow = ! empty( $self_matches[1] ) ? $self_matches[1] : '';