Changeset 4216 for trunk/wp-admin/user-edit.php

Timestamp:

09/24/2006 10:08:58 AM (18 years ago)

Author:

ryan

Message:

Don't show user form without privs. Props westi. fixes #3142

File:

• trunk/wp-admin/user-edit.php (modified) (3 diffs)

trunk/wp-admin/user-edit.php

@@ -13 +13 @@
 $wp_http_referer = remove_query_arg(array('update', 'delete_count'), stripslashes($wp_http_referer));
 
+$user_id = (int) $user_id;
+
+if ( !$user_id )
+    wp_die(__('Invalid user ID.'));
+
 switch ($action) {
 case 'switchposts':
@@ -27 +32 @@
 
 if ( !current_user_can('edit_user', $user_id) )
-    $errors = new WP_Error('head', __('You do not have permission to edit this user.'));
-else
-    $errors = edit_user($user_id);
+    wp_die(__('You do not have permission to edit this user.'));
+
+$errors = edit_user($user_id);
 
 if( !is_wp_error( $errors ) ) {
@@ -39 +44 @@
 
 default:
+$profileuser = get_user_to_edit($user_id);
+
+if ( !current_user_can('edit_user', $user_id) )
+        wp_die(__('You do not have permission to edit this user.'));
+
 include ('admin-header.php');
-
-$profileuser = get_user_to_edit($user_id);
-
-if ( !current_user_can('edit_user', $user_id) )
-    if ( !is_wp_error( $errors ) )
-        $errors = new WP_Error('head', __('You do not have permission to edit this user.'));
 ?>