[wp-trac] [WordPress Trac] #63104: Undefined constant "BLOGUPLOADDIR" for subdirectory multisites

[WordPress Trac]

#63104: Undefined constant "BLOGUPLOADDIR" for subdirectory multisites
-------------------------------------+------------------------
 Reporter:  danielpw                 |       Owner:  realloc
     Type:  defect (bug)             |      Status:  assigned
 Priority:  normal                   |   Milestone:  6.9
Component:  Networks and Sites       |     Version:  3.0
 Severity:  normal                   |  Resolution:
 Keywords:  has-test-info has-patch  |     Focuses:  multisite
-------------------------------------+------------------------

Comment (by dd32):

 Replying to [comment:9 johnjamesjacoby]:
 > Despite some debugging, it’s still unclear how `ms-files.php` can be
 requested without `ms_upload_constants()` being called – unless perhaps
 `ms_files_rewriting` is unexpectedly being flipped.

 In the case of buddypress.org it's hit because pentesters request it
 directly :)

 That can be reproduced on the playground:
 https://playground.wordpress.net/?multisite=yes&url=%2Fwp-includes%2Fms-
 files.php

 However, it's not at all clear to me how examples shared in this ticket of
 `/files/` in a generated media url could occur, although it seems to me
 likely that it would be caused by incorrectly configured constants in wp-
 config.php or a plugin.

 @jakeparis If you're still experiencing the issue above, please note that
 this is something incorrectly configured in your environment, and
 resolving this ticket won't actually help you.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/63104#comment:12>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform