Issue with function get_avatar() and edit user account
-
I was approached by a customer with a problem: Do not display the page with a list of users in the admin area. When debugging is enabled, no errors are displayed. In the process of clarifying the reasons set: hung function get_avatar()
File: /wp-admin/includes/class-wp-users-list-table.php (396)Later found the root cause: one of the users set as your avatar picture which had size 3,5Mb, name of avatar was partially written in Cyrillic. The problem was solved by renaming the file in Latin letters and reduction its size to 25Kb.
I think, there are problem with implementation of function get_avatar, in part of absent of size validation of picture before loading. It possible, functionality of “edit user account” page, which allow load big picture as avatar, have problem too.
It is not good idea, when user can crash admin page by external data.
- The topic ‘Issue with function get_avatar() and edit user account’ is closed to new replies.