Changeset 15150

Timestamp:

06/06/2010 03:05:18 PM (15 years ago)

Author:

ryan

Message:

Don't allow promoting a user that doesn't already belong to the blog.

File:

• trunk/wp-admin/users.php (modified) (1 diff)

trunk/wp-admin/users.php

@@ -74 +74 @@
             continue;
         }
+
+        // If the user doesn't already belong to the blog, bail.
+        if ( !is_user_member_of_blog( $id ) )
+            wp_die(__('Cheatin’ uh?'));
 
         $user = new WP_User($id);