WordPress.org

Make WordPress Core

Changeset 6497


Ignore:
Timestamp:
12/26/2007 07:51:01 PM (12 years ago)
Author:
ryan
Message:

Limit post_password exposure. Props josephscott for the patch and xknown for the find. fixes #5535 for 2.3

File:
1 edited

Legend:

Unmodified
Added
Removed
  • branches/2.3/xmlrpc.php

    r6127 r6497  
    14251425        }
    14261426
     1427        $this_user = set_current_user( 0, $user_login );
     1428
    14271429        foreach ($posts_list as $entry) {
     1430            if (
     1431                !empty( $entry['post_password'] )
     1432                && !current_user_can( 'edit_post', $entry['ID'] )
     1433            ) {
     1434                unset( $entry['post_password'] );
     1435            }
    14281436
    14291437            $post_date = mysql2date('Ymd\TH:i:s', $entry['post_date']);
Note: See TracChangeset for help on using the changeset viewer.