Make WordPress Core

Changeset 16222


Ignore:
Timestamp:
11/06/2010 10:07:35 AM (14 years ago)
Author:
westi
Message:

Extra cap checks. See #15326.

Location:
trunk/wp-admin
Files:
2 edited

Legend:

Unmodified
Added
Removed
  • trunk/wp-admin/edit-comments.php

    r16175 r16222  
    99/** WordPress Administration Bootstrap */
    1010require_once('./admin.php');
    11 
     11if ( !current_user_can('edit_posts') )
     12    wp_die(__('Cheatin’ uh?'));
     13           
    1214$wp_list_table = get_list_table('WP_Comments_List_Table');
    1315$wp_list_table->check_permissions();
  • trunk/wp-admin/edit-tags.php

    r16175 r16222  
    99/** WordPress Administration Bootstrap */
    1010require_once('./admin.php');
    11 
     11if ( !current_user_can( $tax->cap->manage_terms ) )
     12    wp_die( __( 'Cheatin’ uh?' ) );
     13           
    1214$wp_list_table = get_list_table('WP_Terms_List_Table');
    1315$wp_list_table->check_permissions();
Note: See TracChangeset for help on using the changeset viewer.