PHP code gets stripped out on a network install

Viewing 2 replies - 1 through 2 (of 2 total)
  • Plugin Author Samuel Wood (Otto)

    (@otto42)

    WordPress.org Admin

    9 years, 8 months ago

    Any ideas?

    Sure. Remove the plugin and run for the hills. Don’t look back.

    This plugin absolutely should never be run on a multisite installation. Allowing people on a multisite system to run arbitrary PHP code is frankly insane.

    That said, I’m glad that at least that particular check works, because admins of individual sites on a multisite installation do not have the “unfiltered_html” capability and so should not be allowed to use arbitrary HTML code, much less PHP code. On a multisite install, only Super Admins have that privilege, and only they should be able to put PHP code into the widget.

    Still, don’t use this plugin on multisite. Heck, don’t use it anywhere. There’s no good reason for it.

    Thread Starter mmihelic

    (@mmihelic)

    9 years, 8 months ago

    Intersting stuff from the horse’s mouth, as it were 🙂
    Thanks.

    Kind regards, Mitja

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘PHP code gets stripped out on a network install’ is closed to new replies.

Tags