Changeset 11763

Timestamp:

08/01/2009 09:58:59 PM (15 years ago)

Author:

ryan

Message:

Add some CYA cap checks.

Location:

trunk/wp-admin

Files:

• edit-comments.php (modified) (1 diff)
• edit-pages.php (modified) (1 diff)
• edit.php (modified) (1 diff)

trunk/wp-admin/edit-comments.php

@@ -9 +9 @@
 /** WordPress Administration Bootstrap */
 require_once('admin.php');
+
+if ( !current_user_can('edit_posts') )
+    wp_die(__('Cheatin’ uh?'));
 
 wp_enqueue_script('admin-comments');

trunk/wp-admin/edit-pages.php

@@ -9 +9 @@
 /** WordPress Administration Bootstrap */
 require_once('admin.php');
+
+if ( !current_user_can('edit_pages') )
+    wp_die(__('Cheatin’ uh?'));
 
 // Handle bulk actions

trunk/wp-admin/edit.php

@@ -9 +9 @@
 /** WordPress Administration Bootstrap */
 require_once('admin.php');
+
+if ( !current_user_can('edit_posts') )
+    wp_die(__('Cheatin’ uh?'));
 
 // Back-compat for viewing comments of an entry