Changeset 25540 for trunk/src/wp-admin/includes/class-wp-upgrader.php

Timestamp:

09/21/2013 06:48:20 AM (11 years ago)

Author:

dd32

Message:

Upgrader: Perform a MD5 file verification check on the files during upgrade. This ensures that both a Partial upgrade build can be used, and that all the files were copied into place correctly.
Props pento for initial patch. Fixes #18201

File:

• trunk/src/wp-admin/includes/class-wp-upgrader.php (modified) (2 diffs)

trunk/src/wp-admin/includes/class-wp-upgrader.php

@@ -1112 +1112 @@
         $wp_dir = trailingslashit($wp_filesystem->abspath());
 
+        // Pre-cache the checksums for the versions we care about
+        get_core_checksums( array( $wp_version, $current->version ) );
+
+        $no_partial = false;
+        if ( ! $this->check_files() )
+            $no_partial = true;
+
         // If partial update is returned from the API, use that, unless we're doing a reinstall.
         // If we cross the new_bundled version number, then use the new_bundled zip.
         // Don't though if the constant is set to skip bundled items.
         // If the API returns a no_content zip, go with it. Finally, default to the full zip.
-        if ( $current->packages->partial && 'reinstall' != $current->response && $wp_version == $current->partial_version )
+        if ( $current->packages->partial && 'reinstall' != $current->response && $wp_version == $current->partial_version && ! $no_partial )
             $to_download = 'partial';
         elseif ( $current->packages->new_bundled && version_compare( $wp_version, $current->new_bundled, '<' )
@@ -1206 +1213 @@
     }
 
+    function check_files() {
+        global $wp_version;
+
+        $checksums = get_core_checksums( $wp_version );
+
+        if ( empty( $checksums[ $wp_version ] ) || ! is_array( $checksums[ $wp_version ] ) )
+            return false;
+
+        foreach ( $checksums[ $wp_version ] as $file => $checksum ) {
+            if ( md5_file( ABSPATH . $file ) !== $checksum )
+                return false;
+        }
+
+        return true;
+    }
 }