Testing locate_template() Function

Test 1 - Legitimate Template File: '; if ($template_result) { echo '✅ Found template file at: ' . esc_html($template_result); } else { echo '❌ No template file found: ' . $template_file; } echo '

'; $non_template_file = 'test-non-template.txt'; $non_template_result = locate_template($non_template_file, false, false); echo '

Test 2 - Non-Template File: '; if ($non_template_result) { echo '❌ Wrongly loaded non-template file at: ' . esc_html($non_template_result); } else { echo '✅ Correctly did not load non-template file: ' . esc_html($non_template_file); } echo '

'; $traversal_file = '../../wp-config.php'; $traversal_result = locate_template($traversal_file, false, false); echo '

Test 3 - Directory Traversal Attempt: '; if ($traversal_result) { echo '❌ Loaded file outside theme at: ' . esc_html($traversal_result); } else { echo '✅ Blocked traversal attempt for: ' . esc_html($traversal_file); } echo '

'; ?>