WP_REST_Attachments_Controller::get_attachment_upload_subdir( string $attached_file ): string|null

Source

protected function get_attachment_upload_subdir( string $attached_file ): ?string {
	$uploads = wp_get_upload_dir();
	if ( empty( $uploads['basedir'] ) ) {
		return null;
	}

	$basedir  = untrailingslashit( wp_normalize_path( $uploads['basedir'] ) );
	$file_dir = wp_normalize_path( dirname( $attached_file ) );

	/*
	 * The attachment's directory must be the uploads base directory itself
	 * or a directory inside it. The trailing slash in the prefix comparison
	 * keeps a sibling directory that merely shares the prefix (for example
	 * 'uploads-elsewhere' next to 'uploads') from matching.
	 */
	if ( $file_dir !== $basedir && ! str_starts_with( $file_dir, trailingslashit( $basedir ) ) ) {
		return null;
	}

	$subdir = (string) substr( $file_dir, strlen( $basedir ) );

	// A prefix match alone does not rule out a path that climbs back out.
	if ( in_array( '..', explode( '/', $subdir ), true ) ) {
		return null;
	}

	return $subdir;
}

View all references View on Trac View on GitHub