Plugin includes debug.php which can trigger custom debug code

  • kirrus

    (@kirrus)


    7 years, 1 month ago

    Line 1006 of varnish-http-purge.php has;
    require_once 'debug.php';

    If a site has an existent debug.php in the webroot, that gets included by the plugin, and it initializes the plugin without all the pluggable functions being available. It broke a prod site when we installed this plugin! The devs were using it to isolate a problem in the site at the time.

Viewing 2 replies - 1 through 2 (of 2 total)
  • Plugin Contributor Ipstenu (Mika Epstein)

    (@ipstenu)

    🏳️‍🌈 Advisor and Activist

    7 years, 1 month ago

    That shouldn’t happen. By default, paths are relative to the file that the request originated from. What version of PHP are you running? It’s possibly mis-configured.

    Thread Starter kirrus

    (@kirrus)

    7 years, 1 month ago

    7.3, running almost-default config from Ondřej Surý’s repo (increased upload, post body and memory limits)

Viewing 2 replies - 1 through 2 (of 2 total)

The topic ‘Plugin includes debug.php which can trigger custom debug code’ is closed to new replies.