Changeset 5386 for branches/2.2/wp-admin/widgets.php

Timestamp:

05/04/2007 05:52:57 PM (18 years ago)

Author:

ryan

Message:

Do a cap check at the top of widgets since it won't always inherit the menu cap check.

File:

• branches/2.2/wp-admin/widgets.php (modified) (2 diffs)

branches/2.2/wp-admin/widgets.php

@@ -2 +2 @@
 
 require_once 'admin.php';
+
+if ( ! current_user_can('edit_themes') )
+    wp_die( __( 'Cheatin’ uh?' ));
 
 wp_enqueue_script( 'scriptaculous-effects' );
@@ -351 +354 @@
         
             <p class="submit">
-            <?php
-                if ( function_exists( 'wp_nonce_field' ) ) {
-                    wp_nonce_field( 'widgets-save-widget-order' );
-                }
-            ?>
+            <?php wp_nonce_field( 'widgets-save-widget-order' ); ?>
                 <input type="hidden" name="action" id="action" value="save_widget_order" />
                 <input type="submit" value="<?php _e( 'Save Changes &raquo;' ); ?>" />