WordPress.org

Make WordPress Core

Opened 8 months ago

#52443 new defect (bug)

Extra networkwide param in activate_plugin function

Reported by: dam6pl Owned by:
Milestone: Awaiting Review Priority: normal
Severity: normal Version:
Component: Plugins Keywords:
Focuses: Cc:

Description

The issue is an extra $_GET parameter that is added in the activate_plugin function.

<?PHP //wp-admin/includes/plugin.php:639
$_GET['networkwide'] = 1;

In my case, I had been using the activate_plugin function in the mu-plugins directory to protect some plugins against deactivation.

As a result, this parameter had an impact on the OAuth authorization process in one of the plugins because this networkwide has been used to build the signature.

I know the size of the potential impact is really small but in my opinion, this parameter should be unset at the end of the function.

Change History (0)

Note: See TracTickets for help on using tickets.