Make WordPress Core

Opened 5 years ago

Closed 5 years ago

#13944 closed defect (bug) (fixed)

wp-admin/plugins.php still accessible by normal user in multisite

Reported by: itxitx Owned by:
Milestone: 3.0 Priority: high
Severity: blocker Version: 3.0
Component: Plugins Keywords: has-patch dev-feedback
Focuses: Cc:


If "Super Admin > Options >Enable administration menus > plugins" unchecked, the Plugins menus are disappear by normal user, but somehow the normal user can still access the plugins if they go to /wp-admin/plugins.php
it's not happen in wpmu 2.9.2, they displaying "Page disabled by the administrator"

Attachments (3)

13944.patch (661 bytes) - added by ocean90 5 years ago.
13944.2.patch (1.2 KB) - added by ocean90 5 years ago.
Merge wp_die and admin_notice
13944.3.patch (1.2 KB) - added by ocean90 5 years ago.

Download all attachments as: .zip

Change History (8)

comment:1 @ocean905 years ago

  • Keywords needs-patch added; plugins removed
  • Severity changed from normal to blocker

Thx for reporting this!

@ocean905 years ago

comment:2 @ocean905 years ago

13944.patch: I used the same code as it's used in WPMU.

comment:3 @ocean905 years ago

  • Keywords has-patch dev-feedback added; multisite needs-patch removed

@ocean905 years ago

Merge wp_die and admin_notice

@ocean905 years ago

comment:4 @ocean905 years ago

13944.3.patch: Works now for me. I use 'Cheatin’ uh?' so that we didn't have a new string.

comment:5 @ryan5 years ago

  • Resolution set to fixed
  • Status changed from new to closed

(In [15271]) Allow only super admins to see plugins.php if the Plugins menu is not exposed. Props ocean90. fixes #13944

Note: See TracTickets for help on using tickets.