Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 481614 - www-apps/wordpress: workaround for not working direct upgrade
Summary: www-apps/wordpress: workaround for not working direct upgrade
Status: UNCONFIRMED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Gentoo Web Application Packages Maintainers
URL: http://core.trac.wordpress.org/ticket...
Whiteboard:
Keywords: PATCH
Depends on:
Blocks:
 
Reported: 2013-08-19 10:07 UTC by Hendrik v. Raven
Modified: 2014-09-24 10:54 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Hendrik v. Raven 2013-08-19 10:07:28 UTC
Wordpress has a bug, that direct plugin upgrade (upgrading plugins directly into filesystem if it's writable, not via ftp) is not working if wp-admin/update.php is not writable by wordpress (see http://core.trac.wordpress.org/ticket/10205).

Since the bug is open for more than 4 years and upstream is not willing to fix that bug it would be nice to have a fix in gentoo, which would be
    webapp_serverowned "${MY_HTDOCSDIR}"/wp-admin/update.php
in src_install.
It exposes a security risc, since it allows the httpd to change code it executes, so a USE-flag may be an apropriate solution, on the other hand theres already
    webapp_serverowned "${MY_HTDOCSDIR}"/index.php
    webapp_serverowned "${MY_HTDOCSDIR}"/wp-admin/menu.php
in src_install() exposing the same risc (which may be a bug as well).