Upstream/WordPress
1
0
Fork 0
mirror of https://github.com/WordPress/WordPress.git synced 2024-12-23 01:27:36 +01:00
Code Issues Projects Releases Wiki Activity

Check upload_files cap for inline uploader. Props David House and doit-cu. fixes #2302

Browse Source 
git-svn-id: http://svn.automattic.com/wordpress/trunk@3456 1a063a9b-81f0-0310-95a4-ce76da25c4cd
This commit is contained in:
ryan 2006-01-18 19:16:31 +00:00
parent 395b6dbc1a
commit 19b29d08ee
3 changed files with 16 additions and 12 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
wp-admin/edit-form-advanced.php
View File

@ -218,11 +218,13 @@ else
<?php do_action('edit_form_advanced'); ?> <?php do_action('edit_form_advanced'); ?>
<?php <?php
$uploading_iframe_ID = (0 == $post_ID ? $temp_ID : $post_ID); if (current_user_can('upload_files')) {
$uploading_iframe_src = "inline-uploading.php?action=view&amp;post=$uploading_iframe_ID"; $uploading_iframe_ID = (0 == $post_ID ? $temp_ID : $post_ID);
$uploading_iframe_src = apply_filters('uploading_iframe_src', $uploading_iframe_src); $uploading_iframe_src = "inline-uploading.php?action=view&amp;post=$uploading_iframe_ID";
if ( false != $uploading_iframe_src ) $uploading_iframe_src = apply_filters('uploading_iframe_src', $uploading_iframe_src);
echo '<iframe id="uploading" border="0" src="' . $uploading_iframe_src . '">' . __('This feature requires iframe support.') . '</iframe>'; if ( false != $uploading_iframe_src )
echo '<iframe id="uploading" border="0" src="' . $uploading_iframe_src . '">' . __('This feature requires iframe support.') . '</iframe>';
}
?> ?>
<div id="advancedstuff" class="dbx-group" > <div id="advancedstuff" class="dbx-group" >

12
wp-admin/edit-page-form.php
View File

@ -184,11 +184,13 @@ else
<?php do_action('edit_page_form'); ?> <?php do_action('edit_page_form'); ?>
<?php <?php
$uploading_iframe_ID = (0 == $post_ID ? $temp_ID : $post_ID); if (current_user_can('upload_files')) {
$uploading_iframe_src = "inline-uploading.php?action=view&amp;post=$uploading_iframe_ID"; $uploading_iframe_ID = (0 == $post_ID ? $temp_ID : $post_ID);
$uploading_iframe_src = apply_filters('uploading_iframe_src', $uploading_iframe_src); $uploading_iframe_src = "inline-uploading.php?action=view&amp;post=$uploading_iframe_ID";
if ( false != $uploading_iframe_src ) $uploading_iframe_src = apply_filters('uploading_iframe_src', $uploading_iframe_src);
echo '<iframe id="uploading" border="0" src="' . $uploading_iframe_src . '">' . __('This feature requires iframe support.') . '</iframe>'; if ( false != $uploading_iframe_src )
echo '<iframe id="uploading" border="0" src="' . $uploading_iframe_src . '">' . __('This feature requires iframe support.') . '</iframe>';
}
?> ?>
<div id="advancedstuff" class="dbx-group"> <div id="advancedstuff" class="dbx-group">

4
wp-admin/inline-uploading.php
View File

@ -4,8 +4,8 @@ require_once('admin.php');
header('Content-Type: text/html; charset=' . get_option('blog_charset')); header('Content-Type: text/html; charset=' . get_option('blog_charset'));
if (!current_user_can('edit_posts')) if (!current_user_can('upload_files'))
die(__('You do not have permission to edit posts.')); die(__('You do not have permission to upload files.'));
$wpvarstoreset = array('action', 'post', 'all', 'last', 'link', 'sort', 'start', 'imgtitle', 'descr', 'attachment'); $wpvarstoreset = array('action', 'post', 'all', 'last', 'link', 'sort', 'start', 'imgtitle', 'descr', 'attachment');