WordPress.org

Make WordPress Core


Ignore:
Timestamp:
04/24/2019 07:43:29 AM (3 months ago)
Author:
tellyworth
Message:

Upgrade/install: fix verification bugs and scale back signature checks.

This fixes several bugs in the signature verification code:
Disables signature checks on certain incompatible PHP versions that cause math errors when opcache is enabled;
Prevents a spurious URL and subsequent error when downloading a zip file with query arguments;
Prevents errors triggered by third-party upgrade scripts as per #46615;
Disables signature tests for Plugins, Themes, and Translations, leaving only core updates.

At the 5.2 release the API servers will only provide signatures for core update packages, which is why messages are suppressed for plugins and other package types. Signatures for those other items will become available later.

Props dd32.
See #39309, #46615

File:
1 edited

Legend:

Unmodified
Added
Removed
  • trunk/src/wp-admin/includes/class-core-upgrader.php

    r45046 r45262  
    122122        }
    123123
    124         $download = $this->download_package( $current->packages->$to_download );
     124        $download = $this->download_package( $current->packages->$to_download, true );
    125125
    126126        // Allow for signature soft-fail.
Note: See TracChangeset for help on using the changeset viewer.