Changeset 13709

Timestamp:

03/15/2010 06:10:34 PM (15 years ago)

Author:

wpmuguru

Message:

block unregistered settings in multisite, see #11644, related #11730

File:

• trunk/wp-admin/options.php (modified) (1 diff)

trunk/wp-admin/options.php

@@ -110 +110 @@
     if ( 'options' == $option_page )
         $options = explode(',', stripslashes( $_POST[ 'page_options' ] ));
+        if( is_multisite() && !is_super_admin() )
+            wp_die( __( 'Not allowed here' ) );
     else
         $options = $whitelist_options[ $option_page ];