Forums

[Plugin: WP Security Scan] Bug: Database Security - database.php (1 post)

  1. KrX
    Member
    Posted 4 months ago #

    Bug 1. Function where wp-config.php gets changed.
    Function will replace <b>all</b> instances of $GLOBALS['table_prefix'], even if value it is replacing is not $table_prefix = 'foobar';
    e.g. New prefix: "foo". If the username is <i>define('DB_USER', 'wp_');</i> (happens to be <i>wp_</i>), the username will also be changed to "foo".
    (Line 141 of database.php)
    Suggestion: make criteria for <i>str_replace</i> include: <i>$table_prefix = '</i> and <i>';</i> like:
    $table_prefix = 'kwapc_';
    $line = str_replace("$table_prefix = '".$GLOBALS['table_prefix']."';", "$table_prefix = '".$newpref."';", $line);

    Bug 2. MySQL: Table wp_usermeta's whose meta_key value == "wp_capabilities" and "wp_metaboxorder_dashboard" do not get changed into the new prefix values.
    This causes Wordpress to output errors like "You do not have sufficient permissions to access this page.", especially in administration pages.

Reply

You must log in to post.

About this Topic