Upstream/WordPress
1
0
Fork 0
mirror of https://github.com/WordPress/WordPress.git synced 2024-06-23 13:24:57 +02:00
Code Issues Projects Releases Wiki Activity

Use assign_terms cap for tag search and tag cloud in admin ajax. fixes #15437.

Browse Source 
git-svn-id: http://svn.automattic.com/wordpress/trunk@16771 1a063a9b-81f0-0310-95a4-ce76da25c4cd
This commit is contained in:
nacin 2010-12-07 18:59:25 +00:00
parent c697ff4926
commit 1dd324451f
1 changed files with 22 additions and 18 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

40
wp-admin/admin-ajax.php
View File

@ -66,16 +66,19 @@ case 'fetch-list' :
die( '0' );
break;
case 'ajax-tag-search' :
if ( !current_user_can( 'edit_posts' ) )
die('-1');
if ( isset( $_GET['tax'] ) ) {
$taxonomy = sanitize_key( $_GET['tax'] );
$tax = get_taxonomy( $taxonomy );
if ( ! $tax )
die( '0' );
if ( ! current_user_can( $tax->cap->assign_terms ) )
die( '-1' );
} else {
die('0');
}
$s = $_GET['q']; // is this slashed already?
if ( isset($_GET['tax']) )
$taxonomy = sanitize_title($_GET['tax']);
else
die('0');
if ( false !== strpos( $s, ',' ) ) {
$s = explode( ',', $s );
$s = $s[count( $s ) - 1];
@ -547,23 +550,24 @@ case 'add-tag' :
$x->send();
break;
case 'get-tagcloud' :
if ( !current_user_can( 'edit_posts' ) )
die('-1');
if ( isset($_POST['tax']) )
$taxonomy = sanitize_title($_POST['tax']);
else
if ( isset( $_POST['tax'] ) ) {
$taxonomy = sanitize_key( $_POST['tax'] );
$tax = get_taxonomy( $taxonomy );
if ( ! $tax )
die( '0' );
if ( ! current_user_can( $tax->cap->assign_terms ) )
die( '-1' );
} else {
die('0');
}
$tags = get_terms( $taxonomy, array( 'number' => 45, 'orderby' => 'count', 'order' => 'DESC' ) );
if ( empty( $tags ) ) {
$tax = get_taxonomy( $taxonomy );
if ( empty( $tags ) )
die( isset( $tax->no_tagcloud ) ? $tax->no_tagcloud : __('No tags found!') );
}
if ( is_wp_error($tags) )
die($tags->get_error_message());
if ( is_wp_error( $tags ) )
die( $tags->get_error_message() );
foreach ( $tags as $key => $tag ) {
$tags[ $key ]->link = '#';