Include Me closed for download temporarily

Hi WP.org cannot accept include me plugin as-is since it enables the blog owner to access file outside its blog root.

I’m going to change the plugin to include files only stored in a specific folder.
Since that could be a problem under some circumstances, I’ll add the option to define a constant in the wp-config.php file to change the folder (and if it’s allowed to unlock the folder constraint).

Stefano.

This is very encouraging news. I already only use a directory that is contained in the wp-content directory, so I don’t anticipate any problems with your proposed solution.

Thanks for the quick reply and the good news. Include Me is invaluable to some of my websites that display content generated from another desktop application.

Stefano,

Thanks for the great plugin — so so useful in places where you want to have a consistent structure and repeated information.

Without promising, do you have any idea as to timeframe you’ll have the new version available?

Thanks!
Neil

Hi Stefano,

You mention that you are changing the plugin to only allow access to a specific folder.

If we are already restricting our access to a folder that is within the wp-content folder, does that protect us from the security risk in the current plugin?

Also, my use of Include Me only uses files that have straight html content – no php. Does that eliminate the risk?

Thanks for any information you can share.

Hi, I talked with WP team and I can add an option to the wp-config.php to revert back to the original behavior. So there should be no problem at all!

Just the time to make and publish those changes.

Stefano.

Stefano,

We tried to update to 1.3, but it breaks our 1.2.1 version since all of our PHP files are in the root of the site. You mentioned “I’ll add the option to define a constant in the wp-config.php file to change the folder (and if it’s allowed to unlock the folder constraint).” – Is that an option? I don’t see that in your current documentation.

If not, is there a place to download version 1.2.1?

Thanks!
Sean

Sorry Stefano – found the reference on the www.remarpro.com download “Install” tab:

Installation:

Once installed you can start to use the [includeme] shortcode to include external file in your posts or pages.
See the official page for example and options.
The inclusion folder is initially set to WP_CONTENT_DIR/include-me. You can change it with a define(‘INCLUDE_ME_DIR’, ‘…’) in your wp-config.php.
If you want to enable the old behavior and be able to include from any location, use define(‘INCLUDE_ME_DIR’, ‘*’).`

Worked perfectly!

Sean

I love the plugin and it did exactly whay I need but now I’ve just discovered that the last update broke my site as I didn’t know about the issues mentioned here.

I added the line

to my wp-config.php and got several error messages.

Warning: Use of undefined constant ‘ - assumed '‘' (this will throw an Error in a future version of PHP) in /homepages/25/d105006015/htdocs/truescot/wp-config.php on line 93

Warning: Use of undefined constant ’ - assumed '’' (this will throw an Error in a future version of PHP) in /homepages/25/d105006015/htdocs/truescot/wp-config.php on line 93

Warning: A non-numeric value encountered in /homepages/25/d105006015/htdocs/truescot/wp-config.php on line 93

Warning: A non-numeric value encountered in /homepages/25/d105006015/htdocs/truescot/wp-config.php on line 93

Hi, do not copy and paste from the documentation since the single quotes are changed in special characters.