Limit what getAuthors exposes. Props josephscott for the patch and xknown for the find. fixes #5534 for 2.4
git-svn-id: http://svn.automattic.com/wordpress/trunk@6498 1a063a9b-81f0-0310-95a4-ce76da25c4cd
This commit is contained in:
parent
f2ea13fd3b
commit
2490ec40c8
16
xmlrpc.php
16
xmlrpc.php
|
@ -527,9 +527,23 @@ class wp_xmlrpc_server extends IXR_Server {
|
||||||
return($this->error);
|
return($this->error);
|
||||||
}
|
}
|
||||||
|
|
||||||
|
set_current_user(0, $username);
|
||||||
|
if(!current_user_can("edit_posts")) {
|
||||||
|
return(new IXR_Error(401, __("Sorry, you can not edit posts on this blog.")));
|
||||||
|
}
|
||||||
|
|
||||||
do_action('xmlrpc_call', 'wp.getAuthors');
|
do_action('xmlrpc_call', 'wp.getAuthors');
|
||||||
|
|
||||||
return(get_users_of_blog());
|
$authors = array();
|
||||||
|
foreach( (array) get_users_of_blog() as $row ) {
|
||||||
|
$authors[] = array(
|
||||||
|
"user_id" => $row->user_id,
|
||||||
|
"user_login" => $row->user_login,
|
||||||
|
"display_name" => $row->display_name
|
||||||
|
);
|
||||||
|
}
|
||||||
|
|
||||||
|
return($authors);
|
||||||
}
|
}
|
||||||
|
|
||||||
/**
|
/**
|
||||||
|
|
Loading…
Reference in New Issue