Call auth_redirect() for customize.php. props ocean90. fixes #20872.

git-svn-id: http://core.svn.wordpress.org/trunk@21019 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2012-06-07 15:25:45 +00:00 · 2012-06-07 15:25:45 +00:00 · 761273807a
parent 39cfdaf149
commit 761273807a
1 changed files with 3 additions and 0 deletions
--- a/wp-includes/class-wp-customize-manager.php
+++ b/wp-includes/class-wp-customize-manager.php
@ -78,6 +78,9 @@ final class WP_Customize_Manager {
 	 * @since 3.4.0
 	 */
 	public function setup_theme() {
+		if ( is_admin() && ! defined( 'DOING_AJAX' ) )
+			auth_redirect();
+
 		send_origin_headers();

 		$this->original_stylesheet = get_stylesheet();