Changeset 25540 for trunk/src/wp-admin/includes/class-wp-upgrader.php

Timestamp:

09/21/2013 06:48:20 AM (13 years ago)

Author:

dd32

Message:

Upgrader: Perform a MD5 file verification check on the files during upgrade. This ensures that both a Partial upgrade build can be used, and that all the files were copied into place correctly.
Props pento for initial patch. Fixes #18201

File:

• trunk/src/wp-admin/includes/class-wp-upgrader.php (modified) (2 diffs)

trunk/src/wp-admin/includes/class-wp-upgrader.php

@@ -1112 +1112 @@
                 $wp_dir = trailingslashit($wp_filesystem->abspath());
 
+                // Pre-cache the checksums for the versions we care about
+                get_core_checksums( array( $wp_version, $current->version ) );
+
+                $no_partial = false;
+                if ( ! $this->check_files() )
+                        $no_partial = true;
+
                 // If partial update is returned from the API, use that, unless we're doing a reinstall.
                 // If we cross the new_bundled version number, then use the new_bundled zip.
                 // Don't though if the constant is set to skip bundled items.
                 // If the API returns a no_content zip, go with it. Finally, default to the full zip.
-                if ( $current->packages->partial && 'reinstall' != $current->response && $wp_version == $current->partial_version )
+                if ( $current->packages->partial && 'reinstall' != $current->response && $wp_version == $current->partial_version && ! $no_partial )
                         $to_download = 'partial';
                 elseif ( $current->packages->new_bundled && version_compare( $wp_version, $current->new_bundled, '<' )
@@ -1206 +1213 @@
         }
 
+        function check_files() {
+                global $wp_version;
+
+                $checksums = get_core_checksums( $wp_version );
+
+                if ( empty( $checksums[ $wp_version ] ) || ! is_array( $checksums[ $wp_version ] ) )
+                        return false;
+
+                foreach ( $checksums[ $wp_version ] as $file => $checksum ) {
+                        if ( md5_file( ABSPATH . $file ) !== $checksum )
+                                return false;
+                }
+
+                return true;
+        }
 }