Full Path Disclosure

  • I just scanned my site with an online service and it report:
    Full Path Disclosure (FPD) in ‘https://examplesitename.com/wp-includes/rss-functions.php’

    I have visited the page and it say:
    Fatal error: Call to undefined function _deprecated_file() in D:\inetpub\webs\examplesitenamecom\wp-includes\rss-functions.php on line 8

    It would be nice if can be added a check to do nothing when the page is visited directly.

    • This topic was modified 7 years, 2 months ago by ale5000.
Viewing 1 replies (of 1 total)
  • Moderator Jan Dembowski

    (@jdembowski)

    Forum Moderator and Brute Squad

    It would be nice if can be added a check to do nothing when the page is visited directly.

    That’s a server setting, not a WordPress issue. You’d need to put that check into every file in WordPress and there’s not really any reason to do that.

    https://php.net/manual/en/function.error-reporting.php

    If you can’t fix that PHP setting yourself (you should be able to but Windows hosting is weird) please contact your host for support.

    On my site that’s turned off so I don’t see that. When I need to debug I turn it on and get that info.

Viewing 1 replies (of 1 total)
  • The topic ‘Full Path Disclosure’ is closed to new replies.