Opened 4 years ago
#52443 new defect (bug)
Extra networkwide param in activate_plugin function
Reported by: | dam6pl | Owned by: | |
---|---|---|---|
Milestone: | Awaiting Review | Priority: | normal |
Severity: | normal | Version: | |
Component: | Plugins | Keywords: | |
Focuses: | Cc: |
Description
The issue is an extra $_GET parameter that is added in the activate_plugin
function.
<?PHP //wp-admin/includes/plugin.php:639 $_GET['networkwide'] = 1;
In my case, I had been using the activate_plugin
function in the mu-plugins
directory to protect some plugins against deactivation.
As a result, this parameter had an impact on the OAuth authorization process in one of the plugins because this networkwide
has been used to build the signature.
I know the size of the potential impact is really small but in my opinion, this parameter should be unset at the end of the function.
Note: See
TracTickets for help on using
tickets.