Make WordPress Core

Opened 9 years ago

Closed 4 months ago

Last modified 4 months ago

#38012 closed defect (bug) (invalid)

Improve data validation in plugin.php

Reported by: rpayne7264's profile rpayne7264 Owned by:
Milestone: Priority: normal
Severity: normal Version: 4.6
Component: Plugins Keywords:
Focuses: Cc:

Description

function plugin_basename does not do proper data validation of $realdir variable before attempting to use strpos():

PHP Warning: strpos(): Empty needle in /wp-includes/plugin.php on line 736

Change History (3)

#1 @desrosj
7 years ago

  • Keywords reporter-feedback added

Hi @rpayne7264,

Are you still seeing this issue? Can you detail the situation where you are seeing this error? What steps can be taken to produce it?

#2 @mindctrl
4 months ago

  • Keywords reporter-feedback removed
  • Resolution set to invalid
  • Status changed from new to closed

Hi @rpayne7264,

We don't have any other reports of this issue, and it's not clear how to trigger the warning. Since it's been 9 years, I'm going to close this to help clean up Trac. Feel free to reopen if this is still an issue that can be reproduced.

#3 @peterwilsoncc
4 months ago

  • Milestone Awaiting Review deleted
Note: See TracTickets for help on using tickets.