WordPress-C
/
WordPress
mirror of https://github.com/WordPress/WordPress.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Fix the 'current_user_can' check for 'add-comment'. 

git-svn-id: http://svn.automattic.com/wordpress/trunk@12438 1a063a9b-81f0-0310-95a4-ce76da25c4cd
This commit is contained in:
azaozz 2009-12-17 21:02:38 +00:00
parent d73b6930ea
commit 5fceee4f91
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
wp-admin/admin-ajax.php
View File

@ -636,7 +636,7 @@ case 'get-tagcloud' :
break; break;
case 'add-comment' : case 'add-comment' :
check_ajax_referer( $action ); check_ajax_referer( $action );
if ( !current_user_can( 'edit_post', $id ) ) if ( !current_user_can( 'edit_posts' ) )
die('-1'); die('-1');
$search = isset($_POST['s']) ? $_POST['s'] : false; $search = isset($_POST['s']) ? $_POST['s'] : false;
$status = isset($_POST['comment_status']) ? $_POST['comment_status'] : 'all'; $status = isset($_POST['comment_status']) ? $_POST['comment_status'] : 'all';