Ticket #6933: allow-config-file-outside-of-webroot.patch

File allow-config-file-outside-of-webroot.patch, 15.4 kB (added by sambauers, 7 months ago)

  • wp-pass.php

    old new  
    11<?php 
    2 require( dirname(__FILE__) . '/wp-config.php'); 
     2require( dirname(__FILE__) . '/wp-load.php'); 
    33 
    44if ( get_magic_quotes_gpc() ) 
    55        $_POST['post_password'] = stripslashes($_POST['post_password']); 

  • wp-rss.php

    old new  
    11<?php 
    22 
    33if (empty($wp)) { 
    4         require_once('./wp-config.php'); 
     4        require_once('./wp-load.php'); 
    55        wp('feed=rss'); 
    66} 
    77 

  • wp-comments-post.php

    old new  
    55        header('Content-Type: text/plain'); 
    66        exit; 
    77} 
    8 require( dirname(__FILE__) . '/wp-config.php' ); 
     8require( dirname(__FILE__) . '/wp-load.php' ); 
    99 
    1010nocache_headers(); 
    1111 

  • wp-login.php

    old new  
    11<?php 
    2 require( dirname(__FILE__) . '/wp-config.php' ); 
     2require( dirname(__FILE__) . '/wp-load.php' ); 
    33 
    44// Rather than duplicating this HTML all over the place, we'll stick it in function 
    55function login_header($title = 'Login', $message = '', $wp_error = '') { 

  • wp-blog-header.php

    old new  
    11<?php 
    22 
    3 if (! isset($wp_did_header)): 
    4 if ( !file_exists( dirname(__FILE__) . '/wp-config.php') ) { 
    5         if (strpos($_SERVER['PHP_SELF'], 'wp-admin') !== false) $path = ''; 
    6         else $path = 'wp-admin/'; 
     3if ( !isset($wp_did_header) ) { 
    74 
    8         require_once( dirname(__FILE__) . '/wp-includes/classes.php'); 
    9         require_once( dirname(__FILE__) . '/wp-includes/functions.php'); 
    10         require_once( dirname(__FILE__) . '/wp-includes/plugin.php'); 
    11         wp_die("There doesn't seem to be a <code>wp-config.php</code> file. I need this before we can get started. Need more help? <a href='http://codex.wordpress.org/Editing_wp-config.php'>We got it</a>. You can create a <code>wp-config.php</code> file through a web interface, but this doesn't work for all server setups. The safest way is to manually create the file.</p><p><a href='{$path}setup-config.php' class='button'>Create a Configuration File</a>", "WordPress &rsaquo; Error"); 
    12 } 
     5        $wp_did_header = true; 
    136 
    14 $wp_did_header = true; 
     7       require_once( dirname(__FILE__) . '/wp-load.php' ); 
    158 
    16 require_once( dirname(__FILE__) . '/wp-config.php'); 
     9       wp(); 
    1710 
    18 wp(); 
     11       require_once( ABSPATH . WPINC . '/template-loader.php' ); 
    1912 
    20 require_once(ABSPATH . WPINC . '/template-loader.php'); 
     13} 
    2114 
    22 endif; 
    23  
    2415?> 

  • wp-rdf.php

    old new  
    11<?php /* RDF 1.0 generator, original version by garym@teledyn.com */ 
    22 
    33if (empty($wp)) { 
    4         require_once('./wp-config.php'); 
     4        require_once('./wp-load.php'); 
    55        wp('feed=rdf'); 
    66} 
    77 

  • wp-load.php

    old new  
     1<?php 
     2 
     3// Define ABSPATH as this files directory 
     4define( 'ABSPATH', dirname(__FILE__) . '/' ); 
     5 
     6if ( file_exists( ABSPATH . 'wp-config.php') ) { 
     7 
     8        // The config file resides in ABSPATH 
     9        require_once( ABSPATH . 'wp-config.php' ); 
     10 
     11} elseif ( file_exists( dirname(ABSPATH) . '/wp-config.php' ) ) { 
     12 
     13        // The config file resides one level below ABSPATH 
     14        require_once( dirname(ABSPATH) . '/wp-config.php' ); 
     15 
     16} else { 
     17 
     18        // A config file doesn't exist 
     19 
     20        // Set a path for the link to the installer 
     21        if (strpos($_SERVER['PHP_SELF'], 'wp-admin') !== false) $path = ''; 
     22        else $path = 'wp-admin/'; 
     23 
     24        // Die with an error message 
     25        require_once( ABSPATH . '/wp-includes/classes.php' ); 
     26        require_once( ABSPATH . '/wp-includes/functions.php' ); 
     27        require_once( ABSPATH . '/wp-includes/plugin.php' ); 
     28        wp_die("There doesn't seem to be a <code>wp-config.php</code> file. I need this before we can get started. Need more help? <a href='http://codex.wordpress.org/Editing_wp-config.php'>We got it</a>. You can create a <code>wp-config.php</code> file through a web interface, but this doesn't work for all server setups. The safest way is to manually create the file.</p><p><a href='{$path}setup-config.php' class='button'>Create a Configuration File</a>", "WordPress &rsaquo; Error"); 
     29 
     30} 
     31 
     32?> 

  • wp-app.php

    old new  
    99 
    1010define('APP_REQUEST', true); 
    1111 
    12 require_once('./wp-config.php'); 
     12require_once('./wp-load.php'); 
    1313require_once(ABSPATH . WPINC . '/post-template.php'); 
    1414require_once(ABSPATH . WPINC . '/atomlib.php'); 
    1515require_once(ABSPATH . WPINC . '/feed.php'); 

  • wp-includes/js/tinymce/tiny_mce_config.php

    old new  
    44 * $Id: tiny_mce_gzip.php 315 2007-10-25 14:03:43Z spocke $ 
    55 * 
    66 * @author Moxiecode 
    7  * @copyright Copyright � 2005-2006, Moxiecode Systems AB, All rights reserved. 
     7 * @copyright Copyright © 2005-2006, Moxiecode Systems AB, All rights reserved. 
    88 * 
    99 * This file compresses the TinyMCE JavaScript using GZip. 
    1010 **/ 
    …… 
    1212// Discard any buffers 
    1313while ( @ob_end_clean() ); 
    1414 
    15 @ require('../../../wp-config.php'); 
     15@ require('../../../wp-load.php'); 
    1616 
    1717function getFileContents($path) { 
    1818 

  • wp-includes/js/tinymce/wp-mce-help.php

    old new  
    1 <?php require_once('../../../wp-config.php'); 
     1<?php require_once('../../../wp-load.php'); 
    22header('Content-Type: text/html; charset=' . get_bloginfo('charset')); 
    33?> 
    44<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> 

  • xmlrpc.php

    old new  
    1515if ( isset($HTTP_RAW_POST_DATA) ) 
    1616        $HTTP_RAW_POST_DATA = trim($HTTP_RAW_POST_DATA); 
    1717 
    18 include('./wp-config.php'); 
     18include('./wp-load.php'); 
    1919 
    2020if ( isset( $_GET['rsd'] ) ) { // http://archipelago.phrasewise.com/rsd 
    2121header('Content-Type: text/xml; charset=' . get_option('blog_charset'), true); 

  • wp-mail.php

    old new  
    11<?php 
    2 require(dirname(__FILE__) . '/wp-config.php'); 
     2require(dirname(__FILE__) . '/wp-load.php'); 
    33 
    44require_once(ABSPATH.WPINC.'/class-pop3.php'); 
    55 

  • wp-register.php

    old new  
    33# This file is deprecated, but you shouldn't have been linking to it directly anyway :P 
    44# Use wp_register() to create a registration link instead, it's much better ;) 
    55 
    6 require('./wp-config.php'); 
     6require('./wp-load.php'); 
    77wp_redirect('wp-login.php?action=register'); 
    88 
    99?> 

  • wp-config-sample.php

    old new  
    2323 
    2424/* That's all, stop editing! Happy blogging. */ 
    2525 
    26 define('ABSPATH', dirname(__FILE__).'/'); 
    27 require_once(ABSPATH.'wp-settings.php'); 
     26if ( !defined('ABSPATH') ) 
     27        define('ABSPATH', dirname(__FILE__) . '/'); 
     28require_once(ABSPATH . 'wp-settings.php'); 
    2829?> 

  • wp-links-opml.php

    old new  
    11<?php 
    22 
    33if (empty($wp)) { 
    4         require_once('./wp-config.php'); 
     4        require_once('./wp-load.php'); 
    55        wp(); 
    66} 
    77 

  • wp-trackback.php

    old new  
    11<?php 
    22 
    33if (empty($wp)) { 
    4         require_once('./wp-config.php'); 
     4        require_once('./wp-load.php'); 
    55        wp('tb=1'); 
    66} 
    77 

  • wp-rss2.php

    old new  
    11<?php 
    22 
    33if (empty($wp)) { 
    4         require_once('./wp-config.php'); 
     4        require_once('./wp-load.php'); 
    55        wp('feed=rss2'); 
    66} 
    77 

  • wp-commentsrss2.php

    old new  
    11<?php 
    22 
    33if (empty($wp)) { 
    4         require_once('./wp-config.php'); 
     4        require_once('./wp-load.php'); 
    55        wp('feed=rss2&withcomments=1'); 
    66} 
    77 

  • wp-atom.php

    old new  
    11<?php 
    22 
    33if (empty($wp)) { 
    4         require_once('./wp-config.php'); 
     4        require_once('./wp-load.php'); 
    55        wp('feed=atom'); 
    66} 
    77 

  • wp-cron.php

    old new  
    11<?php 
    22ignore_user_abort(true); 
    33define('DOING_CRON', TRUE); 
    4 require_once('./wp-config.php'); 
     4require_once('./wp-load.php'); 
    55 
    66if ( $_GET['check'] != wp_hash('187425') ) 
    77        exit; 

  • wp-admin/update-links.php

    old new  
    11<?php 
    2 require_once('../wp-config.php'); 
     2require_once('../wp-load.php'); 
    33require_once( ABSPATH . 'wp-includes/class-snoopy.php'); 
    44 
    55if ( !get_option('use_linksupdate') ) 

  • wp-admin/admin-ajax.php

    old new  
    11<?php 
    22define('DOING_AJAX', true); 
    33 
    4 require_once('../wp-config.php'); 
     4require_once('../wp-load.php'); 
    55require_once('includes/admin.php'); 
    66 
    77if ( !is_user_logged_in() ) 

  • wp-admin/install-helper.php

    old new  
    11<?php 
    2 require_once(dirname(dirname(__FILE__)).'/wp-config.php'); 
     2$wp_only_load_config = true; 
     3require_once(dirname(dirname(__FILE__)).'/wp-load.php'); 
    34$debug = 0; 
    45 
    56/** 

  • wp-admin/admin.php

    old new  
    22define('WP_ADMIN', TRUE); 
    33 
    44if ( defined('ABSPATH') ) 
    5         require_once( ABSPATH . 'wp-config.php'); 
     5        require_once(ABSPATH . 'wp-load.php'); 
    66else 
    7     require_once('../wp-config.php'); 
     7       require_once('../wp-load.php'); 
    88 
    99if ( get_option('db_version') != $wp_db_version ) { 
    1010        wp_redirect(get_option('siteurl') . '/wp-admin/upgrade.php?_wp_http_referer=' . urlencode(stripslashes($_SERVER['REQUEST_URI']))); 

  • wp-admin/async-upload.php

    old new  
    55*/ 
    66 
    77if ( defined('ABSPATH') ) 
    8         require_once( ABSPATH . 'wp-config.php'); 
     8        require_once(ABSPATH . 'wp-load.php'); 
    99else 
    10     require_once('../wp-config.php'); 
     10       require_once('../wp-load.php'); 
    1111 
    1212// Flash often fails to send cookies with the POST or upload, so we need to pass it in GET or POST instead 
    1313if ( empty($_COOKIE[AUTH_COOKIE]) && !empty($_REQUEST['auth_cookie']) ) 

  • wp-admin/moderation.php

    old new  
    11<?php 
    2 require_once('../wp-config.php'); 
     2require_once('../wp-load.php'); 
    33wp_redirect('edit-comments.php?comment_status=moderated'); 
    44?> 

  • wp-admin/upgrade.php

    old new  
    11<?php 
    22define('WP_INSTALLING', true); 
    3 if (!file_exists('../wp-config.php')) 
    4         die("There doesn't seem to be a <code>wp-config.php</code> file. I need this before we can get started. Need more help? <a href='http://codex.wordpress.org/Installing_WordPress#Step_3:_Set_up_wp-config.php'>We got it</a>. You can create a <code>wp-config.php</code> file through a web interface, but this doesn't work for all server setups. The safest way is to manually create the file.</p><p><a href='setup-config.php' class='button'>Create a Configuration File</a>"); 
    53 
    6 require('../wp-config.php'); 
     4require('../wp-load.php'); 
    75timer_start(); 
    86require_once(ABSPATH . 'wp-admin/includes/upgrade.php'); 
    97 

  • wp-admin/setup-config.php

    old new  
    2020if (file_exists('../wp-config.php')) 
    2121        wp_die("<p>The file 'wp-config.php' already exists. If you need to reset any of the configuration items in this file, please delete it first. You may try <a href='install.php'>installing now</a>.</p>"); 
    2222 
     23// Check if wp-config.php exists above the root directory 
     24if (file_exists('../../wp-config.php')) 
     25        wp_die("<p>The file 'wp-config.php' already exists one level above your WordPress installation. If you need to reset any of the configuration items in this file, please delete it first. You may try <a href='install.php'>installing now</a>.</p>"); 
     26 
    2327if (isset($_GET['step'])) 
    2428        $step = $_GET['step']; 
    2529else 

  • wp-admin/install.php

    old new  
    11<?php 
    22define('WP_INSTALLING', true); 
    3 if (!file_exists('../wp-config.php')) { 
    4   require_once('../wp-includes/compat.php'); 
    5   require_once('../wp-includes/functions.php'); 
    6   wp_die("There doesn't seem to be a <code>wp-config.php</code> file. I need this before we can get started. Need more help? <a href='http://codex.wordpress.org/Editing_wp-config.php'>We got it</a>. You can create a <code>wp-config.php</code> file through a web interface, but this doesn't work for all server setups. The safest way is to manually create the file.</p><p><a href='setup-config.php' class='button'>Create a Configuration File</a>", "WordPress &rsaquo; Error"); 
    7 } 
    83 
    9 require_once('../wp-config.php'); 
     4require_once('../wp-load.php'); 
    105require_once('./includes/upgrade.php'); 
    116 
    127if (isset($_GET['step'])) 

  • wp-admin/link-parse-opml.php

    old new  
    11<?php 
    2 require_once('../wp-config.php'); 
     2require_once('../wp-load.php'); 
    33 
    44// columns we wish to find are:  link_url, link_name, link_target, link_description 
    55// we need to map XML attribute names to our columns