Changeset 58813 for trunk/src/wp-admin/includes/plugin-install.php

Timestamp:

07/27/2024 12:25:44 AM (10 months ago)

Author:

peterwilsoncc

Message:

General: Introduce wp_get_wp_version() to get unmodified version.

Introduces wp_get_wp_version() to get an unmodified value of $wp_version from wp-includes/version.php. Some plugins modify the global in an attempt to improve security through obscurity. This practice can cause errors in WordPress so the ability to get an unmodified version is needed.

Replaces instances within the code base in which version.php was required in order to get an unmodified value. script-loader.php is intentionally excluded from the replacements as the function is not always available to the file.

Props debarghyabanerjee, afragen, costdev.
See #61627.

File:

• trunk/src/wp-admin/includes/plugin-install.php (modified) (3 diffs)

trunk/src/wp-admin/includes/plugin-install.php

@@ -101 +101 @@
  */
 function plugins_api( $action, $args = array() ) {
-    // Include an unmodified $wp_version.
-    require ABSPATH . WPINC . '/version.php';
-
     if ( is_array( $args ) ) {
         $args = (object) $args;
@@ -119 +116 @@
 
     if ( ! isset( $args->wp_version ) ) {
-        $args->wp_version = substr( $wp_version, 0, 3 ); // x.y
+        $args->wp_version = substr( wp_get_wp_version(), 0, 3 ); // x.y
     }
 
@@ -169 +166 @@
         $http_args = array(
             'timeout'    => 15,
-            'user-agent' => 'WordPress/' . $wp_version . '; ' . home_url( '/' ),
+            'user-agent' => 'WordPress/' . wp_get_wp_version() . '; ' . home_url( '/' ),
         );
         $request   = wp_remote_get( $url, $http_args );