WordPress.org

Make WordPress Core

Changeset 13709


Ignore:
Timestamp:
03/15/10 18:10:34 (4 years ago)
Author:
wpmuguru
Message:

block unregistered settings in multisite, see #11644, related #11730

File:
1 edited

Legend:

Unmodified
Added
Removed
  • trunk/wp-admin/options.php

    r13705 r13709  
    110110    if ( 'options' == $option_page ) 
    111111        $options = explode(',', stripslashes( $_POST[ 'page_options' ] )); 
     112        if( is_multisite() && !is_super_admin() ) 
     113            wp_die( __( 'Not allowed here' ) ); 
    112114    else 
    113115        $options = $whitelist_options[ $option_page ]; 
Note: See TracChangeset for help on using the changeset viewer.