Upstream/WordPress
1
0
Fork 0
mirror of https://github.com/WordPress/WordPress.git synced 2024-06-27 23:35:04 +02:00
Code Issues Projects Releases Wiki Activity

Don't show user form without privs. Props westi. fixes #3142

Browse Source 
git-svn-id: http://svn.automattic.com/wordpress/trunk@4216 1a063a9b-81f0-0310-95a4-ce76da25c4cd
This commit is contained in:
ryan 2006-09-24 10:08:58 +00:00
parent a1bf9ad224
commit 37d767a019
1 changed files with 11 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
wp-admin/user-edit.php
View File

@ -12,6 +12,11 @@ wp_reset_vars(array('action', 'redirect', 'profile', 'user_id', 'wp_http_referer
$wp_http_referer = remove_query_arg(array('update', 'delete_count'), stripslashes($wp_http_referer));
$user_id = (int) $user_id;
if ( !$user_id )
wp_die(__('Invalid user ID.'));
switch ($action) {
case 'switchposts':
@ -26,9 +31,9 @@ case 'update':
check_admin_referer('update-user_' . $user_id);
if ( !current_user_can('edit_user', $user_id) )
$errors = new WP_Error('head', __('You do not have permission to edit this user.'));
else
$errors = edit_user($user_id);
wp_die(__('You do not have permission to edit this user.'));
$errors = edit_user($user_id);
if( !is_wp_error( $errors ) ) {
$redirect = "user-edit.php?user_id=$user_id&updated=true";
@ -38,13 +43,12 @@ if( !is_wp_error( $errors ) ) {
}
default:
include ('admin-header.php');
$profileuser = get_user_to_edit($user_id);
if ( !current_user_can('edit_user', $user_id) )
if ( !is_wp_error( $errors ) )
$errors = new WP_Error('head', __('You do not have permission to edit this user.'));
wp_die(__('You do not have permission to edit this user.'));
include ('admin-header.php');
?>
<?php if ( isset($_GET['updated']) ) : ?>