WordPress.org

Make WordPress Core

Opened 4 years ago

Closed 4 years ago

#13944 closed defect (bug) (fixed)

wp-admin/plugins.php still accessible by normal user in multisite

Reported by: itxitx Owned by:
Milestone: 3.0 Priority: high
Severity: blocker Version: 3.0
Component: Plugins Keywords: has-patch dev-feedback
Focuses: Cc:

Description

If "Super Admin > Options >Enable administration menus > plugins" unchecked, the Plugins menus are disappear by normal user, but somehow the normal user can still access the plugins if they go to /wp-admin/plugins.php
it's not happen in wpmu 2.9.2, they displaying "Page disabled by the administrator"

Attachments (3)

13944.patch (661 bytes) - added by ocean90 4 years ago.
13944.2.patch (1.2 KB) - added by ocean90 4 years ago.
Merge wp_die and admin_notice
13944.3.patch (1.2 KB) - added by ocean90 4 years ago.

Download all attachments as: .zip

Change History (8)

comment:1 ocean904 years ago

  • Keywords needs-patch added; plugins removed
  • Severity changed from normal to blocker

Thx for reporting this!

ocean904 years ago

comment:2 ocean904 years ago

13944.patch: I used the same code as it's used in WPMU.

comment:3 ocean904 years ago

  • Keywords has-patch dev-feedback added; multisite needs-patch removed

ocean904 years ago

Merge wp_die and admin_notice

ocean904 years ago

comment:4 ocean904 years ago

13944.3.patch: Works now for me. I use 'Cheatin’ uh?' so that we didn't have a new string.

comment:5 ryan4 years ago

  • Resolution set to fixed
  • Status changed from new to closed

(In [15271]) Allow only super admins to see plugins.php if the Plugins menu is not exposed. Props ocean90. fixes #13944

Note: See TracTickets for help on using tickets.