Hardcoded absolute path

Hi,

We’re evaluating Wordfence to become premium user, however there is one issue that concern us.

Our deployment model allows us to have partition style multiple paths to WordPress where at any given time only one PATH is active (live)
We deploy new code in another path, and then can switch to it with minimal downtime.

As we took a closer look at Wordfence, we realized that there are some hard-coded absoulte paths in some of files / configurations of Wordfence which would pose problems to our deployment.

For example:
The following was added to .user.ini

; Wordfence WAF
auto_prepend_file = '/partition1/public/wordfence-waf.php'
; END Wordfence WAF

Then there’s of course

<?php
// Before removing this file, please verify the PHP ini setting <code>auto_prepend_file</code> does not point to this.

if (file_exists('/partition1/public/wp-content/plugins/wordfence/waf/bootstrap.php')) {
        define("WFWAF_LOG_PATH", '/partition1/public/wp-content/wflogs/');
        include_once '/partition1/public/wp-content/plugins/wordfence/waf/bootstrap.php';
}

Also wp-content/wflogs/config.php seems to have references to this path as well in some encoded form.

Any way to have the paths replaced with relative path and not be hardcoded to absolute paths which would break when we switch to partition2 or other.

Thanks

• This topic was modified 8 years, 6 months ago by 123lb.