WordPress.org

Make WordPress Core

Changeset 46120


Ignore:
Timestamp:
09/15/2019 01:28:51 AM (2 years ago)
Author:
SergeyBiryukov
Message:

Docs: Clarify in update_option() description that it's plugin author's responsibility to check the current user's capabilities before saving any option changes.

Props dinhtungdu, lllor.
Fixes #47820.

File:
1 edited

Legend:

Unmodified
Added
Removed
  • trunk/src/wp-includes/option.php

    r45932 r46120  
    283283 * If the option does not exist, then the option will be added with the option value,
    284284 * with an `$autoload` value of 'yes'.
     285
     286 * This function is designed to work with or without a logged-in user. In terms of security,
     287 * plugin developers should check the current user's capabilities before updating any options.
    285288 *
    286289 * @since 1.0.0
Note: See TracChangeset for help on using the changeset viewer.