General: Stop direct loading of files in /wp-includes that should only be included.

This changeset restricts direct access call in `/wp-includes` and its sub directories.

Follow-up to [11768], [59678].

Props deepakrohilla.
Fixes #61314.




git-svn-id: https://develop.svn.wordpress.org/trunk@59688 602fd350-edb4-49c9-b593-d223f7449a82

Author: audrasjb

src/wp-includes/class-IXR.php

@@ -39,6 +39,11 @@
  * @license    http://www.opensource.org/licenses/bsd-license.php BSD
  */
 
+// Don't load directly.
+if ( ! defined( 'ABSPATH' ) ) {
+	die( '-1' );
+}
+
 require_once ABSPATH . WPINC . '/IXR/class-IXR-server.php';
 
 require_once ABSPATH . WPINC . '/IXR/class-IXR-base64.php';

src/wp-includes/class-wp-customize-control.php

@@ -7,6 +7,11 @@
  * @since 3.4.0
  */
 
+// Don't load directly.
+if ( ! defined( 'ABSPATH' ) ) {
+	die( '-1' );
+}
+
 /**
  * Customize Control class.
  *

src/wp-includes/class-wp-customize-panel.php

@@ -7,6 +7,11 @@
  * @since 4.0.0
  */
 
+// Don't load directly.
+if ( ! defined( 'ABSPATH' ) ) {
+	die( '-1' );
+}
+
 /**
  * Customize Panel class.
  *

src/wp-includes/class-wp-customize-setting.php

@@ -7,6 +7,11 @@
  * @since 3.4.0
  */
 
+// Don't load directly.
+if ( ! defined( 'ABSPATH' ) ) {
+	die( '-1' );
+}
+
 /**
  * Customize Setting class.
  *

src/wp-includes/class-wp-http.php

@@ -7,6 +7,11 @@
  * @since 2.7.0
  */
 
+// Don't load directly.
+if ( ! defined( 'ABSPATH' ) ) {
+	die( '-1' );
+}
+
 if ( ! class_exists( 'WpOrg\Requests\Autoload' ) ) {
 	require ABSPATH . WPINC . '/Requests/src/Autoload.php';
 

src/wp-includes/class-wp-simplepie-sanitize-kses.php

@@ -7,6 +7,11 @@
  * @since 4.7.0
  */
 
+// Don't load directly.
+if ( ! defined( 'ABSPATH' ) ) {
+	die( '-1' );
+}
+
 /**
  * Core class used to implement SimplePie feed sanitization.
  *

src/wp-includes/class-wp-text-diff-renderer-table.php

@@ -7,6 +7,11 @@
  * @since 4.7.0
  */
 
+// Don't load directly.
+if ( ! defined( 'ABSPATH' ) ) {
+	die( '-1' );
+}
+
 /**
  * Table renderer to display the diff lines.
  *

src/wp-includes/default-filters.php

@@ -23,6 +23,11 @@
  * @package WordPress
  */
 
+// Don't load directly.
+if ( ! defined( 'ABSPATH' ) ) {
+	die( '-1' );
+}
+
 // Strip, trim, kses, special chars for string saves.
 foreach ( array( 'pre_term_name', 'pre_comment_author_name', 'pre_link_name', 'pre_link_target', 'pre_link_rel', 'pre_user_display_name', 'pre_user_first_name', 'pre_user_last_name', 'pre_user_nickname' ) as $filter ) {
 	add_filter( $filter, 'sanitize_text_field' );

src/wp-includes/default-widgets.php

@@ -7,6 +7,11 @@
  * @since 2.8.0
  */
 
+// Don't load directly.
+if ( ! defined( 'ABSPATH' ) ) {
+	die( '-1' );
+}
+
 /** WP_Widget_Pages class */
 require_once ABSPATH . WPINC . '/widgets/class-wp-widget-pages.php';
 

src/wp-includes/feed-atom.php

@@ -5,6 +5,11 @@
  * @package WordPress
  */
 
+// Don't load directly.
+if ( ! defined( 'ABSPATH' ) ) {
+	die( '-1' );
+}
+
 header( 'Content-Type: ' . feed_content_type( 'atom' ) . '; charset=' . get_option( 'blog_charset' ), true );
 $more = 1;