Changeset 6256

Timestamp:

10/16/2007 04:09:37 PM (19 years ago)

Author:

ryan

Message:

Add current_user_can() checks to link.php. Props DD32. fixes #4627 for 2.3

File:

• branches/2.3/wp-admin/link.php (modified) (8 diffs)

branches/2.3/wp-admin/link.php

@@ -3 +3 @@
 
 wp_reset_vars(array('action', 'cat_id', 'linkurl', 'name', 'image', 'description', 'visible', 'target', 'category', 'link_id', 'submit', 'order_by', 'links_show_cat_id', 'rating', 'rel', 'notes', 'linkcheck[]'));
+
+if ( ! current_user_can('manage_links') )
+        wp_die( __('You do not have sufficient permissions to edit the links for this blog.') );
 
 if ('' != $_POST['deletebookmarks'])
@@ -14 +17 @@
 
 switch ($action) {
-                case 'deletebookmarks' :
+        case 'deletebookmarks' :
                 check_admin_referer('bulk-bookmarks');
-
-                // check the current user's level first.
-                if (!current_user_can('manage_links'))
-                        wp_die(__('Cheatin’ uh?'));
 
                 //for each link id (in $linkcheck[]) change category to selected value
@@ -42 +41 @@
                 check_admin_referer('bulk-bookmarks');
 
-                // check the current user's level first.
-                if (!current_user_can('manage_links'))
-                        wp_die(__('Cheatin’ uh?'));
-
                 //for each link id (in $linkcheck[]) change category to selected value
                 if (count($linkcheck) == 0) {
@@ -64 +59 @@
                 add_link();
 
-                wp_redirect(wp_get_referer().'?added=true');
+                wp_redirect( wp_get_referer() . '?added=true' );
                 exit;
                 break;
@@ -82 +77 @@
                 check_admin_referer('delete-bookmark_' . $link_id);
 
-                if (!current_user_can('manage_links'))
-                        wp_die(__('Cheatin’ uh?'));
-
                 wp_delete_link($link_id);
 
@@ -98 +90 @@
                 $submenu_file = 'link-manager.php';
                 $title = __('Edit Link');
-                include_once ('admin-header.php');
-                if (!current_user_can('manage_links'))
-                        wp_die(__('You do not have sufficient permissions to edit the links for this blog.'));
 
                 $link_id = (int) $_GET['link_id'];
@@ -107 +96 @@
                         wp_die(__('Link not found.'));
 
+                include_once ('admin-header.php');
                 include ('edit-link-form.php');
+                include ('admin-footer.php');
                 break;
 
@@ -113 +104 @@
                 break;
 }
-
-include ('admin-footer.php');
 ?>