Changeset 16965

Timestamp:

12/15/2010 06:58:05 PM (15 years ago)

Author:

westi

Message:

Move post_type var setup back into edit.php and reinstate the cap check. See #15326

Location:

trunk/wp-admin

Files:

• edit.php (modified) (1 diff)
• includes/class-wp-posts-list-table.php (modified) (1 diff)

trunk/wp-admin/edit.php

@@ -9 +9 @@
 /** WordPress Administration Bootstrap */
 require_once( './admin.php' );
+
+if ( !isset($_GET['post_type']) )
+    $post_type = 'post';
+elseif ( in_array( $_GET['post_type'], get_post_types( array('show_ui' => true ) ) ) )
+    $post_type = $_GET['post_type'];
+else
+    wp_die( __('Invalid post type') );
+
+$_GET['post_type'] = $post_type;
+
+$post_type_object = get_post_type_object( $post_type );
+
+if ( !current_user_can($post_type_object->cap->edit_posts) )
+    wp_die(__('Cheatin’ uh?'));
+
 $wp_list_table = get_list_table('WP_Posts_List_Table');
 $wp_list_table->check_permissions();

trunk/wp-admin/includes/class-wp-posts-list-table.php

@@ -47 +47 @@
     function WP_Posts_List_Table() {
         global $post_type_object, $post_type, $wpdb;
-
-        if ( !isset( $_REQUEST['post_type'] ) )
-            $post_type = 'post';
-        elseif ( in_array( $_REQUEST['post_type'], get_post_types( array( 'show_ui' => true ) ) ) )
-            $post_type = $_REQUEST['post_type'];
-        else
-            wp_die( __( 'Invalid post type' ) );
-        $_REQUEST['post_type'] = $post_type;
 
         $post_type_object = get_post_type_object( $post_type );