Changeset 23307 for trunk/wp-includes/ms-functions.php

Timestamp:

01/18/2013 03:30:55 PM (12 years ago)

Author:

markjaquith

Message:

Properly wipe capabilities from new site-independent multisite users by using the right key.

props wonderboymusic. fixes #15627

File:

• trunk/wp-includes/ms-functions.php (modified) (1 diff)

trunk/wp-includes/ms-functions.php

@@ -910 +910 @@
  * @return mixed Returns false on failure, or int $user_id on success
  */
-function wpmu_create_user( $user_name, $password, $email) {
+function wpmu_create_user( $user_name, $password, $email ) {
     $user_name = preg_replace( '/\s+/', '', sanitize_user( $user_name, true ) );
 
     $user_id = wp_create_user( $user_name, $password, $email );
-    if ( is_wp_error($user_id) )
+    if ( is_wp_error( $user_id ) )
         return false;
 
+    $user = new WP_User( $user_id );
+    
     // Newly created users have no roles or caps until they are added to a blog.
-    delete_user_option( $user_id, 'capabilities' );
+    delete_user_option( $user_id, $user->cap_key );
     delete_user_option( $user_id, 'user_level' );