Make WordPress Core

Opened 8 years ago

Last modified 2 years ago

#38012 new defect (bug)

Improve data validation in plugin.php

Reported by: rpayne7264's profile rpayne7264 Owned by:
Milestone: Awaiting Review Priority: normal
Severity: normal Version: 4.6
Component: Plugins Keywords: reporter-feedback
Focuses: Cc:

Description

function plugin_basename does not do proper data validation of $realdir variable before attempting to use strpos():

PHP Warning: strpos(): Empty needle in /wp-includes/plugin.php on line 736

Change History (1)

#1 @desrosj
5 years ago

  • Keywords reporter-feedback added

Hi @rpayne7264,

Are you still seeing this issue? Can you detail the situation where you are seeing this error? What steps can be taken to produce it?

Note: See TracTickets for help on using tickets.