Help! I cannot access Theme Editor file
-
Hi everyone.
I am new to the forum so I thank everyone for your help with this.
I installed a local wordpress website using Xampp. I am using the onepress theme and activated a onepress child theme. Everything is working fine but in the last 2 days when I click on the Theme file editor under Appearance to change the child’s theme css file I only get a blank page with the message “Sorry, that file cannot be edited.”.
I enabled debugging but I do not get any error in the debug.log
Could anyone help with this issue please?
Thank you so much
-
Someone put this in \wp-includes\functions.php : function validate_file( … ):
// Normalize path for Windows servers $file = wp_normalize_path( $file );That changes the \ sign in $file to / sign, and so it doesn’t pass the $allowed_files check.
For example:
$file original = C:\wamp64\www\wordpress/wp-content/themes/astra-child/style.css
$file after wp_normalize_path -> C:/wamp64/www/wordpress/wp-content/themes/astra-child/style.css$allowed_files = [style.css] => C:\wamp64\www\wordpress/wp-content/themes/astra-child/style.css
Quick solution: comment out the normalize in this function.
Glad to hear it, @castorand !
Probably only in a windows environment on localhost or windows server. My website on linux on the same wordpress version is not affected.
change to this in \wp-includes/functions.php
// Normalize path for Windows servers
$file = wp_normalize_path( $file );
// Normalize all allowed file paths
$allowed_files = array_map( 'wp_normalize_path', $allowed_files );
//../on its own is not allowed:
if ( '../' === $file ) {
return 1;
}
// More than one occurrence of../is not allowed:
if ( preg_match_all( '#\.\./#', $file, $matches, PREG_SET_ORDER ) && ( count( $matches ) > 1 ) ) {
return 1;
}
//../which does not occur at the end of the path is not allowed:
if ( str_contains( $file, '../' ) && '../' !== mb_substr( $file, -3, 3 ) ) {
return 1;
}
// Files not in the allowed file list are not allowed:
if ( ! empty( $allowed_files ) && ! in_array( $file, $allowed_files, true ) ) {
return 3;
}
// Absolute Windows drive paths are not allowed:
if ( ':' === substr( $file, 1, 1 ) ) {
return 2;
}
return 0;
}
- You must be logged in to reply to this topic.