diff --git a/wp-includes/ms-files.php b/wp-includes/ms-files.php index 42826ede61..d17d9f95f7 100644 --- a/wp-includes/ms-files.php +++ b/wp-includes/ms-files.php @@ -25,6 +25,11 @@ if ( '1' === $current_blog->archived || '1' === $current_blog->spam || '1' === $ die( '404 — File not found.' ); } +if ( ! defined( 'BLOGUPLOADDIR' ) ) { + status_header( 500 ); + die( '500 — Directory not configured.' ); +} + $file = rtrim( BLOGUPLOADDIR, '/' ) . '/' . str_replace( '..', '', $_GET['file'] ); if ( ! is_file( $file ) ) { status_header( 404 ); diff --git a/wp-includes/version.php b/wp-includes/version.php index c09ffb73b0..407253d531 100644 --- a/wp-includes/version.php +++ b/wp-includes/version.php @@ -16,7 +16,7 @@ * * @global string $wp_version */ -$wp_version = '6.9-alpha-60955'; +$wp_version = '6.9-alpha-60956'; /** * Holds the WordPress DB revision, increments when changes are made to the WordPress DB schema.