One of my plugins reports base64_encode as missing. I checked my php.ini and know that this function is working before Wordpress loads. Does Wordpress have the habit of disabling functions?

This is the code that checks for the functions:

if (!function_exists('base64_decode') || !function_exists('base64_encode')) {
    exit("base64 missing");
}

This works if placed before Wordpress loads. The exact same code is run by the plugin and it fails. What could have happened in-between.

One of my plugins reports base64_encode as missing. I checked my php.ini and know that this function is working before Wordpress loads. Does Wordpress have the habit of disabling functions?

This is the code that checks for the functions:

if (!function_exists('base64_decode') || !function_exists('base64_encode')) {
    exit("base64 missing");
}

This works if placed before Wordpress loads. The exact same code is run by the plugin and it fails. What could have happened in-between.

• php

1 Answer 1

WP by itself does not disable those functions. This is a security mechanism of one of your plugins or theme that is disabling them. It is common practice for malicious code to be hidden by encoding it, and then decoding and executing it when the site loads.

You can disable plugins one by one until the function works to determine which one is disabling it. Logically any security related plugins would likely be the one's doing it, and with good reason, i.e. Wordfence, Sucuri, etc.