Changeset 4244

Timestamp:

09/25/2006 02:54:23 AM (19 years ago)

Author:

ryan

Message:

Don't show user form without privs. Props westi. fixes #3142

File:

• branches/2.0/wp-admin/user-edit.php (modified) (3 diffs)

branches/2.0/wp-admin/user-edit.php

@@ -22 +22 @@
 }
 
+$user_id = (int) $user_id;
+
+if ( !$user_id )
+    die(__('Invalid user ID.'));
+
 switch ($action) {
 case 'switchposts':
@@ -38 +43 @@
 
 if (!current_user_can('edit_users'))
-    $errors['head'] = __('You do not have permission to edit this user.');
+    die(__('You do not have permission to edit this user.'));
 else
     $errors = edit_user($user_id);
@@ -52 +57 @@
 $profileuser = get_user_to_edit($user_id);
 
-if (!current_user_can('edit_users')) $errors['head'] = __('You do not have permission to edit this user.');
+if (!current_user_can('edit_users')) 
+    die__('You do not have permission to edit this user.');
+
 ?>