Bug 481614

Summary:	www-apps/wordpress: workaround for not working direct upgrade
Product:	Gentoo Linux	Reporter:	Hendrik v. Raven <hendrik>
Component:	Current packages	Assignee:	Gentoo Web Application Packages Maintainers <web-apps>
Status:	UNCONFIRMED ---
Severity:	normal	Keywords:	PATCH
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	http://core.trac.wordpress.org/ticket/10205
Whiteboard:
Package list:		Runtime testing required:	---

Description Hendrik v. Raven 2013-08-19 10:07:28 UTC

Wordpress has a bug, that direct plugin upgrade (upgrading plugins directly into filesystem if it's writable, not via ftp) is not working if wp-admin/update.php is not writable by wordpress (see http://core.trac.wordpress.org/ticket/10205).

Since the bug is open for more than 4 years and upstream is not willing to fix that bug it would be nice to have a fix in gentoo, which would be
    webapp_serverowned "${MY_HTDOCSDIR}"/wp-admin/update.php
in src_install.
It exposes a security risc, since it allows the httpd to change code it executes, so a USE-flag may be an apropriate solution, on the other hand theres already
    webapp_serverowned "${MY_HTDOCSDIR}"/index.php
    webapp_serverowned "${MY_HTDOCSDIR}"/wp-admin/menu.php
in src_install() exposing the same risc (which may be a bug as well).