Changeset 17710 for branches/3.1/wp-admin/press-this.php

Timestamp:

04/26/2011 06:06:50 PM (15 years ago)

Author:

ryan

Message:

Validate post status against capabilities in press this. Props nacin. for 3.1

File:

• branches/3.1/wp-admin/press-this.php (modified) (1 diff)

branches/3.1/wp-admin/press-this.php

@@ -57 +57 @@
         }
         // set the post_content and status
-        $quick['post_status'] = isset($_POST['publish']) ? 'publish' : 'draft';
+        if ( isset( $_POST['publish'] ) && current_user_can( 'publish_posts' ) )
+                $quick['post_status'] = 'publish';
+        elseif ( isset( $_POST['review'] ) )
+                $quick['post_status'] = 'pending';
+        else
+                $quick['post_status'] = 'draft';
         $quick['post_content'] = $content;
         // error handling for media_sideload