Changeset 40174 for branches/4.3/src/wp-admin/plugins.php

Timestamp:

03/06/2017 01:01:32 PM (7 years ago)

Author:

aaroncampbell

Message:

Plugins: Add file check to plugin deletions.

Merges [40169] to 4.3 branch.

Location:

branches/4.3

Files:

• . (modified) (1 prop)
• src/wp-admin/plugins.php (modified) (1 diff)

branches/4.3/src/wp-admin/plugins.php

@@ -229 +229 @@
             if ( empty( $plugins ) ) {
                 wp_redirect( self_admin_url( "plugins.php?error=true&main=true&plugin_status=$status&paged=$page&s=$s" ) );
+                exit;
+            }
+
+            // Bail on all if any paths are invalid.
+            // validate_file() returns truthy for invalid files
+            $invalid_plugin_files = array_filter( $plugins, 'validate_file' );
+            if ( $invalid_plugin_files ) {
+                wp_redirect( self_admin_url("plugins.php?plugin_status=$status&paged=$page&s=$s") );
                 exit;
             }