Changeset 46120 for trunk/src/wp-includes/option.php

Timestamp:

09/15/2019 01:28:51 AM (5 years ago)

Author:

SergeyBiryukov

Message:

Docs: Clarify in update_option() description that it's plugin author's responsibility to check the current user's capabilities before saving any option changes.

Props dinhtungdu, lllor.
Fixes #47820.

File:

• trunk/src/wp-includes/option.php (modified) (1 diff)

trunk/src/wp-includes/option.php

@@ -283 +283 @@
  * If the option does not exist, then the option will be added with the option value,
  * with an `$autoload` value of 'yes'.
+
+ * This function is designed to work with or without a logged-in user. In terms of security, 
+ * plugin developers should check the current user's capabilities before updating any options.
  *
  * @since 1.0.0