Changeset 59678 for trunk/src/wp-admin/admin-header.php

Timestamp:

01/22/2025 02:04:34 PM (5 months ago)

Author:

audrasjb

Message:

General: Stop direct loading of files in /wp-admin that should only be included.

This changeset restricts direct access call in /wp-admin and its sub directories.

Follow-up to [11768].

Props deepakrohilla.
See #61314.

File:

• trunk/src/wp-admin/admin-header.php (modified) (1 diff)

trunk/src/wp-admin/admin-header.php

@@ -6 +6 @@
  * @subpackage Administration
  */
+
+// Don't load directly.
+if ( ! defined( 'ABSPATH' ) ) {
+    die( '-1' );
+}
 
 header( 'Content-Type: ' . get_option( 'html_type' ) . '; charset=' . get_option( 'blog_charset' ) );