Changeset 20566

Timestamp:

04/23/2012 09:41:50 PM (12 years ago)

Author:

ryan

Message:

Require the edit_posts capability for wp_getPostFormats.

Props maxcutler.
Fixes #20154

File:

• trunk/wp-includes/class-wp-xmlrpc-server.php (modified) (1 diff)

trunk/wp-includes/class-wp-xmlrpc-server.php

@@ -2923 +2923 @@
             return $this->error;
 
+        if ( !current_user_can( 'edit_posts' ) )
+            return new IXR_Error( 403, __( 'You are not allowed access to details about this site.' ) );
+
         do_action( 'xmlrpc_call', 'wp.getPostFormats' );