WordPress.org

Make WordPress Core

Changeset 13709


Ignore:
Timestamp:
03/15/2010 06:10:34 PM (10 years ago)
Author:
wpmuguru
Message:

block unregistered settings in multisite, see #11644, related #11730

File:
1 edited

Legend:

Unmodified
Added
Removed
  • trunk/wp-admin/options.php

    r13705 r13709  
    110110    if ( 'options' == $option_page )
    111111        $options = explode(',', stripslashes( $_POST[ 'page_options' ] ));
     112        if( is_multisite() && !is_super_admin() )
     113            wp_die( __( 'Not allowed here' ) );
    112114    else
    113115        $options = $whitelist_options[ $option_page ];
Note: See TracChangeset for help on using the changeset viewer.