Disable Custom PHP & JavaScript snippets

  • Resolved buddywhatshisname

    (@vhmarkgmailcom)


    2 years, 5 months ago

    Can we please have a wp-config.php constant to disable “Custom PHP & JavaScript snippets”? We run a secured WP multisite where allowing admins to run arbitrary PHP or JS is a massive security hole.

Viewing 1 replies (of 1 total)
  • Plugin Author Alimir

    (@alimir)

    Hey @vhmarkgmailcom
    Oops! You’re right, we will fix this in the next update by using following constant:

    define( 'WP_ULIKE_DISABLE_CODE_SNIPPETS', true );

    But until then, you can try to disable following hook at “wp-content/plugins/wp-ulike/includes/hooks/general.php”:

    add_action( 'wp_ulike_loaded', 'wp_ulike_run_php_snippets' );

    • This reply was modified 2 years, 5 months ago by Alimir.
Viewing 1 replies (of 1 total)
  • The topic ‘Disable Custom PHP & JavaScript snippets’ is closed to new replies.