DOCUMENT_ROOT variable in HTTP request
-
Rule 510
POST /wp-admin/post.php – DOCUMENT_ROOT variable in HTTP request – [POST:WooCommerceEventsTicketTheme = / /wp-content/uploads/fooevents/themes/rocko]It has to do with the Plugin “FooEvents for WooCommerce” and stops a shop manager from being able to save a freshly duplicated product in WooCommerce.
Funny, I could not even find an occurrence of the string “DOCUMENT_ROOT” FooEvents plugin folder files.
Is this rule so important with modern PHP 7+ and how can I switch the rule #510 off (not in the rules selector options) without switching off too much?
Is this part of this option “Block localhost IP in GET/POST request”?
- The topic ‘DOCUMENT_ROOT variable in HTTP request’ is closed to new replies.