Hundreds of Daily Errors, You need ABSPATH

  • Resolved H. Adam Lenz

    (@adrock42)


    2 years, 7 months ago

    We are seeing hundreds of errors a day like

    Uncaught exception 'Error' with message 'Call to undefined function esc_html()' in /wp-content/plugins/media-library-assistant/includes/class-mla-file-downloader.php:117

    if you add the following line of code to the top of wp-content/plugins/media-library-assistant/includes/mla-file-downloader.php these errors would go away.

    
if ( ! defined( 'ABSPATH' ) ) {
  exit; // Exit if accessed directly
}

    Please let me know if I can submit this as a pull request somewhere

Viewing 4 replies - 1 through 4 (of 4 total)
  • Thread Starter H. Adam Lenz

    (@adrock42)

    the error occurs when someone browses directly to site.url/wp-content/plugins/media-library-assistant/includes/mla-file-downloader.php

    Plugin Author David Lingren

    (@dglingren)

    Thanks for your report and for the details of your investigation.

    I will add the ABSPATH check to my next MLA version. However, the errors are an indication of some sort of attack on your site which you should look into.

    You wrote “the error occurs when someone browses directly to site.url/wp-content/plugins/media-library-assistant/includes/mla-file-downloader.php“. There is no legitimate reason to access this file (or other MLA code files) directly. I can see how a ‘file-downloader` file would be a tempting target.

    I will post an update and mark this topic resolved when the next MLA version is released. Thanks again for your report and your interest in the plugin.

    Thread Starter H. Adam Lenz

    (@adrock42)

    Awesome, thank you David

    Plugin Author David Lingren

    (@dglingren)

    I have released MLA version 3.00, which contains the fixes required for this topic.

    I am marking this topic resolved, but please update it if you have any problems or further questions regarding MLA’s use of ABSPATH. Thanks for alerting me to this MLA defect.

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘Hundreds of Daily Errors, You need ABSPATH’ is closed to new replies.