4 ms·
Indeed it's completely insane that any plugin can create a file in the site folder, and a public URL will execute it. And a site can have a dozen (or dozens in
by lioeters 2y ago
Indeed it's completely insane that any plugin can create a file in the site folder, and a public URL will execute it. And a site can have a dozen (or dozens in some cases) of plugins from various authors. It's a security nightmare, and I don't know of any (modern) language that allows such a situation other than PHP.
- Sander_Marechal 2y agoThat has absolutely zero to do with PHP itself and everything with the abysmal state of Wordpress code.
- lolc 2y agoWordpress probably still enforces magic quotes which made me bail the hell out when I looked into it ten years ago.
- deleted 2y ago[deleted]