From f8b6a357a0acdb15b86af2f39703a012406e75f6 Mon Sep 17 00:00:00 2001 From: Scott Taylor Date: Tue, 8 Sep 2015 19:31:52 +0000 Subject: [PATCH] Multisite: Don't allow sites to be created with the following reserved slugs: `wp-admin`, `wp-content`, `wp-includes` Props austinginder. Fixes #33615. git-svn-id: https://develop.svn.wordpress.org/trunk@33952 602fd350-edb4-49c9-b593-d223f7449a82 --- src/wp-admin/network/site-new.php | 2 +- src/wp-includes/ms-functions.php | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/src/wp-admin/network/site-new.php b/src/wp-admin/network/site-new.php index 4d8d4443c1..5876037e89 100644 --- a/src/wp-admin/network/site-new.php +++ b/src/wp-admin/network/site-new.php @@ -47,7 +47,7 @@ if ( isset($_REQUEST['action']) && 'add-site' == $_REQUEST['action'] ) { // If not a subdomain install, make sure the domain isn't a reserved word if ( ! is_subdomain_install() ) { /** This filter is documented in wp-includes/ms-functions.php */ - $subdirectory_reserved_names = apply_filters( 'subdirectory_reserved_names', array( 'page', 'comments', 'blog', 'files', 'feed' ) ); + $subdirectory_reserved_names = apply_filters( 'subdirectory_reserved_names', array( 'page', 'comments', 'blog', 'files', 'feed', 'wp-admin', 'wp-content', 'wp-includes' ) ); if ( in_array( $domain, $subdirectory_reserved_names ) ) wp_die( sprintf( __('The following words are reserved for use by WordPress functions and cannot be used as blog names: %s' ), implode( ', ', $subdirectory_reserved_names ) ) ); } diff --git a/src/wp-includes/ms-functions.php b/src/wp-includes/ms-functions.php index edbb984255..464d83ead5 100644 --- a/src/wp-includes/ms-functions.php +++ b/src/wp-includes/ms-functions.php @@ -622,7 +622,7 @@ function wpmu_validate_blog_signup( $blogname, $blog_title, $user = '' ) { * * @param array $subdirectory_reserved_names Array of reserved names. */ - apply_filters( 'subdirectory_reserved_names', array( 'page', 'comments', 'blog', 'files', 'feed' ) ) + apply_filters( 'subdirectory_reserved_names', array( 'page', 'comments', 'blog', 'files', 'feed', 'wp-admin', 'wp-content', 'wp-includes' ) ) ); }