From 214c8ac28f52e48a47ab71d684b23d237b481a8b Mon Sep 17 00:00:00 2001
From: Paul W. Frields <stickster@gmail.com>
Date: Jun 29 2018 16:13:06 +0000
Subject: Hotfix for arbitrary file deletion vulnerability


Q.v. https://blog.ripstech.com/2018/wordpress-file-delete-to-code-execution/
---

diff --git a/fedoramagazine/functions.php b/fedoramagazine/functions.php
index 0ce8a03..e8d851b 100644
--- a/fedoramagazine/functions.php
+++ b/fedoramagazine/functions.php
@@ -819,4 +819,15 @@ add_action( 'wp_head' , array( 'rowling_customize' , 'rowling_header_output' ) )
 // Enqueue live preview javascript in Theme Customizer admin screen
 add_action( 'customize_preview_init' , array( 'rowling_customize' , 'rowling_live_preview' ) );
 
+// Hotfix for arbitrary file deletion vulnerability, 2018-06-29
+add_filter( 'wp_update_attachment_metadata', 'rips_unlink_tempfix' );
+
+function rips_unlink_tempfix( $data ) {
+    if( isset($data['thumb']) ) {
+        $data['thumb'] = basename($data['thumb']);
+    }
+
+    return $data;
+}
+
 ?>
\ No newline at end of file