[wp-trac] [WordPress Trac] #34200: Prompted to upgrade database when visiting /wp-admin/ and logged out

WordPress Trac noreply at wordpress.org
Fri Jan 15 19:22:00 UTC 2016


#34200: Prompted to upgrade database when visiting /wp-admin/ and logged out
--------------------------+------------------------------
 Reporter:  morganestes   |       Owner:
     Type:  defect (bug)  |      Status:  new
 Priority:  normal        |   Milestone:  Awaiting Review
Component:  Database      |     Version:  4.3.1
 Severity:  normal        |  Resolution:
 Keywords:                |     Focuses:  administration
--------------------------+------------------------------

Comment (by nacin):

 To be clear: The problem here is the potential for simultaneous upgrades —
 see #3901 — *not* any kind of authentication issue. We've long ago made
 the determination that DB upgrades do not require authentication.

 The existing core upgrader currently relies on this — it fires a DB
 upgrade automatically by sending an unauthenticated HTTP request. This
 means that most people actually never see this page anymore.

 Cron jobs that run `curl -s .../wp-admin/upgrade.php?step=upgrade_db` also
 rely on this.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/34200#comment:7>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list