Open basedir problem in /wp-includes/theme.php

[webraket]

On line 590 in theme.php there's:

if ( is_dir($theme_root . '/' . $theme_dir) && is_readable($theme_root . '/' . $theme_dir) ) {

please change this to:

if ( $theme_dir!=".." && is_dir($theme_root . '/' . $theme_dir) && is_readable($theme_root . '/' . $theme_dir) ) {

is_dir() should not check .. and . folders, this results in open basedir errors when sharing themes between multiple installs. (symlinked)

[westi]

We should more likely move the check for . and CVS before the if is_dir check and include .. (and probably .svn) in the list of dirs to skip

[dd32]

Can we drop CVS out of it when adding .svn?

[solarissmoke]

Patch updated as per westi's and dd32's comments above. I realised we don't need to check for '..' specifically because we were already checking for $theme_dir[0] == '.', just needed to move it in front of the is_dir check.

[ocean90]

Duplicate of #20103.

Fixed in [20020].