processwire-issues
processwire-issues copied to clipboard
processwire
ProcessWire issue reports.
### CVE-2025-60790 — ProcessWire 3.0.246 DoS via unlimited pre-validation ZIP extraction in Language Support - **Components:** WireUpload::saveUploadZip(), WireFileTools::unzip() - **Who can exploit:** User with `lang-edit` - **Impact:** Resource-exhaustion (CPU/disk) -...
Can’t save page (id=50813): /repeaters/for-field-185/for-page-50808/1762281864-5294-2/: Call $page->of(false); before getting/setting values that will be modified and saved. [body] (/wire/core/PagesEditor.php:470) And another related one that referenced `[Page::statusCorrupted]` instead of `[body]` These are...
Deprecated : Constant PDO::MYSQL_ATTR_INIT_COMMAND is deprecated since 8.5, use Pdo\Mysql::ATTR_INIT_COMMAND instead in WireDatabasePDO.php on line 282 Deprecated : Constant PDO::MYSQL_ATTR_INIT_COMMAND is deprecated since 8.5, use Pdo\Mysql::ATTR_INIT_COMMAND instead in WireDatabasePDO.php on...
Just one example, but in the new Konkat theme, InputfieldMarkup items gets this outline added and I want to override it, but the only way seems to be by ID...
The string "any" is a valid value for the step attribute of input type number: https://developer.mozilla.org/en-US/docs/Web/HTML/Reference/Elements/input/number#step But InputfieldFloat does not apply this value if given (it applies `.01`): PW 3.0.252
Using the new Admin-Theme-Uikit, when assigning ->themeColor like ''warning" or "highlight" to fields or fieldsets, in LightMode it behaves as expected, (known from the past). In DarkMode it glitches. I...
Do the following to replicate this warning: - create a lister (can be listerpro) and under "What pages should a repeater show?" make it be a `repeater_...` template (create a...
I have so far tested this with the `User::changed` hook (shown below), but also with `Pages::saveReady` so it seems to be universal with hooks ``` $wire->addHookAfter('User::changed(refund_test)', function($event) { $u =...
Hi @ryancramerdesign - sorry, not sure if this is a bug, intentional, or unavoidable. I send `application/json` and `application/x-www-form-urlencoded` payloads to an endpoint created with a URL hook and `file_get_contents('php://input')`...
This should be an easy one. This is the first time I've had this issue, but because my production server's database is physically hosted on different hardware than my webserver,...
