Changes from branches/2.3/wp-admin/link.php at r6256 to trunk/wp-admin/link.php at r5637

File:

• trunk/wp-admin/link.php (modified) (8 diffs)

trunk/wp-admin/link.php

@@ -3 +3 @@
 
 wp_reset_vars(array('action', 'cat_id', 'linkurl', 'name', 'image', 'description', 'visible', 'target', 'category', 'link_id', 'submit', 'order_by', 'links_show_cat_id', 'rating', 'rel', 'notes', 'linkcheck[]'));
-
-if ( ! current_user_can('manage_links') )
-    wp_die( __('You do not have sufficient permissions to edit the links for this blog.') );
 
 if ('' != $_POST['deletebookmarks'])
@@ -17 +14 @@
 
 switch ($action) {
-    case 'deletebookmarks' :
+        case 'deletebookmarks' :
         check_admin_referer('bulk-bookmarks');
+
+        // check the current user's level first.
+        if (!current_user_can('manage_links'))
+            wp_die(__('Cheatin’ uh?'));
 
         //for each link id (in $linkcheck[]) change category to selected value
@@ -41 +42 @@
         check_admin_referer('bulk-bookmarks');
 
+        // check the current user's level first.
+        if (!current_user_can('manage_links'))
+            wp_die(__('Cheatin’ uh?'));
+
         //for each link id (in $linkcheck[]) change category to selected value
         if (count($linkcheck) == 0) {
@@ -59 +64 @@
         add_link();
 
-        wp_redirect( wp_get_referer() . '?added=true' );
+        wp_redirect(wp_get_referer().'?added=true');
         exit;
         break;
@@ -77 +82 @@
         check_admin_referer('delete-bookmark_' . $link_id);
 
+        if (!current_user_can('manage_links'))
+            wp_die(__('Cheatin’ uh?'));
+
         wp_delete_link($link_id);
 
@@ -90 +98 @@
         $submenu_file = 'link-manager.php';
         $title = __('Edit Link');
+        include_once ('admin-header.php');
+        if (!current_user_can('manage_links'))
+            wp_die(__('You do not have sufficient permissions to edit the links for this blog.'));
 
         $link_id = (int) $_GET['link_id'];
@@ -96 +107 @@
             wp_die(__('Link not found.'));
 
-        include_once ('admin-header.php');
         include ('edit-link-form.php');
-        include ('admin-footer.php');
         break;
 
@@ -104 +113 @@
         break;
 }
+
+include ('admin-footer.php');
 ?>