Make WordPress Core


Ignore:
Timestamp:
01/22/2025 02:04:34 PM (15 months ago)
Author:
audrasjb
Message:

General: Stop direct loading of files in /wp-admin that should only be included.

This changeset restricts direct access call in /wp-admin and its sub directories.

Follow-up to [11768].

Props deepakrohilla.
See #61314.

File:
1 edited

Legend:

Unmodified
Added
Removed
  • trunk/src/wp-admin/options-head.php

    r58069 r59678  
    99 */
    1010
     11// Don't load directly.
     12if ( ! defined( 'ABSPATH' ) ) {
     13    die( '-1' );
     14}
     15
    1116$action = ! empty( $_REQUEST['action'] ) ? sanitize_text_field( $_REQUEST['action'] ) : '';
    1217
Note: See TracChangeset for help on using the changeset viewer.