Changeset 62649 for trunk/src/wp-admin/custom-header.php

Timestamp:

07/06/2026 09:08:27 PM (2 months ago)

Author:

westonruter

Message:

General: Unify direct file-access guards to use exit.

Previously, files used three different patterns to block direct access: die( '-1' ), die(), and exit(). They also lacked the explanatory comment or had inconsistent wording. This normalizes all 40 affected files under src/ to the canonical exit; form recommended by the Plugin Developer Handbook. Each is preceded by a consistent // Don't load directly. comment.

The -1 return value carried no meaning in a direct file-access context, where no JavaScript AJAX handler exists to interpret it; it was only ever relevant inside admin-ajax.php responses, which are left untouched.

Developed in ​https://github.com/WordPress/wordpress-develop/pull/12340.
Follow-up to r11768, r59678, r59688.

Props masteradhoc, presskopp, rajinsharwar, mukeshpanchal27, westonruter.
Fixes #58987.

File:

• trunk/src/wp-admin/custom-header.php (modified) (1 diff)

trunk/src/wp-admin/custom-header.php

@@ -12 +12 @@
 // Don't load directly.
 if ( ! defined( 'ABSPATH' ) ) {
-        die( '-1' );
+        exit;
 }