[wp-trac] [WordPress Trac] #31104: Plugin activation includes plugin file in variable scope of activate_plugin
WordPress Trac
noreply at wordpress.org
Sat Apr 24 17:56:38 UTC 2021
#31104: Plugin activation includes plugin file in variable scope of activate_plugin
-----------------------------+-----------------------------
Reporter: Mike_Cowobo | Owner: SergeyBiryukov
Type: defect (bug) | Status: reviewing
Priority: normal | Milestone: 5.8
Component: Plugins | Version: 4.2
Severity: normal | Resolution:
Keywords: has-patch early | Focuses:
-----------------------------+-----------------------------
Comment (by SergeyBiryukov):
Replying to [ticket:31104 Mike_Cowobo]:
> Overriding `$current` and `$network_wide`, a plugin could potentially
deactivate all active plugins on activation or activate itself network
wide when activated per-site (or vice-versa).
Just noting that the issue with `$current` appears to be resolved in
[32504] / #32368, as the value is now recreated after the plugin is
loaded. The issue with overriding `$network_wide` still exists though, so
it seems more future-proof to go with the patch.
--
Ticket URL: <https://core.trac.wordpress.org/ticket/31104#comment:13>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform
More information about the wp-trac
mailing list