Changeset 59688

Timestamp:

01/22/2025 07:46:16 PM (4 months ago)

Author:

audrasjb

Message:

General: Stop direct loading of files in /wp-includes that should only be included.

This changeset restricts direct access call in /wp-includes and its sub directories.

Follow-up to [11768], [59678].

Props deepakrohilla.
Fixes #61314.

Location:

trunk/src/wp-includes

Files:

• class-IXR.php (modified) (1 diff)
• class-wp-customize-control.php (modified) (1 diff)
• class-wp-customize-panel.php (modified) (1 diff)
• class-wp-customize-setting.php (modified) (1 diff)
• class-wp-http.php (modified) (1 diff)
• class-wp-simplepie-sanitize-kses.php (modified) (1 diff)
• class-wp-text-diff-renderer-table.php (modified) (1 diff)
• default-filters.php (modified) (1 diff)
• default-widgets.php (modified) (1 diff)
• feed-atom.php (modified) (1 diff)
• functions.php (modified) (1 diff)
• media.php (modified) (1 diff)
• ms-blogs.php (modified) (1 diff)
• ms-settings.php (modified) (1 diff)
• nav-menu-template.php (modified) (1 diff)
• update.php (modified) (1 diff)
• vars.php (modified) (1 diff)
• wp-diff.php (modified) (1 diff)

trunk/src/wp-includes/class-IXR.php

@@ -40 +40 @@
  */
 
+// Don't load directly.
+if ( ! defined( 'ABSPATH' ) ) {
+    die( '-1' );
+}
+
 require_once ABSPATH . WPINC . '/IXR/class-IXR-server.php';
 

trunk/src/wp-includes/class-wp-customize-control.php

@@ -7 +7 @@
  * @since 3.4.0
  */
+
+// Don't load directly.
+if ( ! defined( 'ABSPATH' ) ) {
+    die( '-1' );
+}
 
 /**

trunk/src/wp-includes/class-wp-customize-panel.php

@@ -7 +7 @@
  * @since 4.0.0
  */
+
+// Don't load directly.
+if ( ! defined( 'ABSPATH' ) ) {
+    die( '-1' );
+}
 
 /**

trunk/src/wp-includes/class-wp-customize-setting.php

@@ -7 +7 @@
  * @since 3.4.0
  */
+
+// Don't load directly.
+if ( ! defined( 'ABSPATH' ) ) {
+    die( '-1' );
+}
 
 /**

trunk/src/wp-includes/class-wp-http.php

@@ -7 +7 @@
  * @since 2.7.0
  */
+
+// Don't load directly.
+if ( ! defined( 'ABSPATH' ) ) {
+    die( '-1' );
+}
 
 if ( ! class_exists( 'WpOrg\Requests\Autoload' ) ) {

trunk/src/wp-includes/class-wp-simplepie-sanitize-kses.php

@@ -7 +7 @@
  * @since 4.7.0
  */
+
+// Don't load directly.
+if ( ! defined( 'ABSPATH' ) ) {
+    die( '-1' );
+}
 
 /**

trunk/src/wp-includes/class-wp-text-diff-renderer-table.php

@@ -7 +7 @@
  * @since 4.7.0
  */
+
+// Don't load directly.
+if ( ! defined( 'ABSPATH' ) ) {
+    die( '-1' );
+}
 
 /**

trunk/src/wp-includes/default-filters.php

@@ -23 +23 @@
  * @package WordPress
  */
+
+// Don't load directly.
+if ( ! defined( 'ABSPATH' ) ) {
+    die( '-1' );
+}
 
 // Strip, trim, kses, special chars for string saves.

trunk/src/wp-includes/default-widgets.php

@@ -7 +7 @@
  * @since 2.8.0
  */
+
+// Don't load directly.
+if ( ! defined( 'ABSPATH' ) ) {
+    die( '-1' );
+}
 
 /** WP_Widget_Pages class */

trunk/src/wp-includes/feed-atom.php

@@ -5 +5 @@
  * @package WordPress
  */
+
+// Don't load directly.
+if ( ! defined( 'ABSPATH' ) ) {
+    die( '-1' );
+}
 
 header( 'Content-Type: ' . feed_content_type( 'atom' ) . '; charset=' . get_option( 'blog_charset' ), true );

trunk/src/wp-includes/functions.php

@@ -5 +5 @@
  * @package WordPress
  */
+
+// Don't load directly.
+if ( ! defined( 'ABSPATH' ) ) {
+    die( '-1' );
+}
 
 require ABSPATH . WPINC . '/option.php';

trunk/src/wp-includes/media.php

@@ -6 +6 @@
  * @subpackage Media
  */
+
+// Don't load directly.
+if ( ! defined( 'ABSPATH' ) ) {
+    die( '-1' );
+}
 
 /**

trunk/src/wp-includes/ms-blogs.php

@@ -8 +8 @@
  * @since MU (3.0.0)
  */
+
+// Don't load directly.
+if ( ! defined( 'ABSPATH' ) ) {
+    die( '-1' );
+}
 
 require_once ABSPATH . WPINC . '/ms-site.php';

trunk/src/wp-includes/ms-settings.php

@@ -10 +10 @@
  * @since 3.0.0
  */
+
+// Don't load directly.
+if ( ! defined( 'ABSPATH' ) ) {
+    die( '-1' );
+}
 
 /**

trunk/src/wp-includes/nav-menu-template.php

@@ -7 +7 @@
  * @since 3.0.0
  */
+
+// Don't load directly.
+if ( ! defined( 'ABSPATH' ) ) {
+    die( '-1' );
+}
 
 /** Walker_Nav_Menu class */

trunk/src/wp-includes/update.php

@@ -6 +6 @@
  * @since 2.3.0
  */
+
+// Don't load directly.
+if ( ! defined( 'ABSPATH' ) ) {
+    die( '-1' );
+}
 
 /**

trunk/src/wp-includes/vars.php

@@ -15 +15 @@
  * @package WordPress
  */
+
+// Don't load directly.
+if ( ! defined( 'ABSPATH' ) ) {
+    die( '-1' );
+}
 
 global $pagenow,

trunk/src/wp-includes/wp-diff.php

@@ -8 +8 @@
  * @subpackage Diff
  */
+
+// Don't load directly.
+if ( ! defined( 'ABSPATH' ) ) {
+    die( '-1' );
+}
 
 if ( ! class_exists( 'Text_Diff', false ) ) {