Changeset 7829 for trunk/wp-admin/media.php

Timestamp:

04/25/2008 03:23:11 PM (18 years ago)

Author:

ryan

Message:

Move cap check up. Props mdawaffe. fixes #6838 for trunk

File:

• trunk/wp-admin/media.php (modified) (1 diff)

trunk/wp-admin/media.php

@@ -10 +10 @@
 switch( $action ) :
 case 'editattachment' :
+    $attachment_id = (int) $_POST['attachment_id'];
+    check_admin_referer('media-form');
+
+    if ( !current_user_can('edit_post', $attachment_id) )
+        wp_die ( __('You are not allowed to edit this attachment.') );
+
     $errors = media_upload_form_handler();
-    $attachment_id = (int) $_POST['attachment_id'];
+
 
     check_admin_referer('media-form');