[wp-trac] [WordPress Trac] #63303: Direct access to wp-settings.php results in a fatal error due to undefined ABSPATH constant.

WordPress Trac noreply at wordpress.org
Fri Apr 18 15:17:36 UTC 2025


#63303: Direct access to wp-settings.php results in a fatal error due to undefined
ABSPATH constant.
-------------------------------------------------+-------------------------
 Reporter:  matinlk                              |       Owner:  (none)
     Type:  defect (bug)                         |      Status:  new
 Priority:  normal                               |   Milestone:  Awaiting
                                                 |  Review
Component:  Bootstrap/Load                       |     Version:  6.8
 Severity:  critical                             |  Resolution:
 Keywords:  has-patch dev-feedback has-testing-  |     Focuses:
  info                                           |
-------------------------------------------------+-------------------------
Changes (by SirLouen):

 * keywords:  has-patch => has-patch dev-feedback has-testing-info


Comment:

 == Combined Bug Reproduction and Patch Test Report
 === Description
 This report validates that the patch works as expected.

 Patch tested:
 https://core.trac.wordpress.org/attachment/ticket/63303/63303.patch

 === Environment
 - WordPress: 6.9-alpha-60093-src
 - PHP: 8.4.6
 - Server: nginx/1.27.5
 - Database: mysqli (Server: 8.4.5 / Client: mysqlnd 8.4.6)
 - Browser: Chrome 135.0.0.0
 - OS: Windows 10/11
 - Theme: Twenty Twenty-Five 1.2
 - MU Plugins: None activated
 - Plugins:
   * Test Reports 1.2.0

 === Bug Reproduction
 1. Open <sites_url>/wp-settings.php
 2. 🐞Bug occurs

 === Expected Results

 - No errors, white page.

 === Actual Results
 1.  ✅ Issue resolved with patch.

 === Additional Notes
 Technically, all the root files include `wp-load.php` except for this one.
 And this has been historically. I wonder when this started happening, or
 if this has been for so long.

 I'm not sure if this file has to be directly accessed like `wp-cron.php`
 or the liking. Since obviously `wp-load.php` is not required by this file
 I would rather suggest using classic a die alternative, instead of loading
 `wp-load.php`

 === Supplemental Artifacts

 Attach new alternative `63303.2.patch`

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/63303#comment:7>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list