Make WordPress Core

Opened 10 years ago

Closed 16 months ago

Last modified 16 months ago

#38012 closed defect (bug) (invalid)

Improve data validation in plugin.php

Reported by: rpayne7264 Owned by:
Priority: normal Milestone:
Component: Plugins Version: 4.6
Severity: normal Keywords:
Cc: Focuses:

Description

function plugin_basename does not do proper data validation of $realdir variable before attempting to use strpos():

PHP Warning: strpos(): Empty needle in /wp-includes/plugin.php on line 736

Change History (3)

#1 @desrosj
7 years ago

  • Keywords reporter-feedback added

Hi @rpayne7264,

Are you still seeing this issue? Can you detail the situation where you are seeing this error? What steps can be taken to produce it?

#2 @mindctrl
16 months ago

  • Keywords reporter-feedback removed
  • Resolution → invalid
  • Status new → closed

Hi @rpayne7264,

We don't have any other reports of this issue, and it's not clear how to trigger the warning. Since it's been 9 years, I'm going to close this to help clean up Trac. Feel free to reopen if this is still an issue that can be reproduced.

#3 @peterwilsoncc
16 months ago

  • Milestone Awaiting Review
Note: See TracTickets for help on using tickets.