Changeset 36338

Timestamp:

01/17/2016 11:58:04 PM (9 years ago)

Author:

ericlewis

Message:

Themes: Only users with proper capability should see theme errors.

After [36335], if a template file is not loaded, an error is displayed
to logged-in users. As logged-in users may have no capabilities,
this check is insubstantial. Limit the display of this error to users
with the install_themes capability, i.e. someone who has the capacity
to deal with the error.

See #21931.

File:

• trunk/src/wp-includes/template-loader.php (modified) (1 diff)

trunk/src/wp-includes/template-loader.php

@@ -87 +87 @@
     if ( $template = apply_filters( 'template_include', $template ) ) {
         include( $template );
-    } elseif ( is_user_logged_in() ) {
+    } elseif ( current_user_can( 'install_themes' ) ) {
         $theme = wp_get_theme();
         if ( $theme->errors() ) {