Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Wordpress WPML database migrations vulnerable to update race-condition #1004

Open
Firefishy opened this issue Nov 29, 2023 · 1 comment
Open

Wordpress WPML database migrations vulnerable to update race-condition #1004

Firefishy opened this issue Nov 29, 2023 · 1 comment
Labels
wordpress

Comments

@Firefishy
Copy link
Member

The WPML plugin is used on wordpress sites is vulnerable to a race-condition where chef is updating the codebase and a simultaneous web request triggers a partial but incomplete database migration.

WPML marks the migration as complete, but it may not have processed all/any portions of the migration due to the migration codebase files still being deployed.

We should change the deployment code to update the website code + plugins codebase using an atomic action.
@Firefishy
Copy link
Member Author

This could be mitigated by moving the wordpress services to containers per #807

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
wordpress
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@Firefishy