Docs: Clarify in `update_option()` description that it's plugin author's responsibility to check the current user's capabilities before saving any option changes.

Props dinhtungdu, lllor.
Fixes #47820.
Built from https://develop.svn.wordpress.org/trunk@46120


git-svn-id: http://core.svn.wordpress.org/trunk@45932 1a063a9b-81f0-0310-95a4-ce76da25c4cd
This commit is contained in:
Sergey Biryukov 2019-09-15 01:29:54 +00:00
parent 142efedee0
commit 7a3e224e8d
2 changed files with 4 additions and 1 deletions

View File

@ -282,6 +282,9 @@ function wp_load_core_site_options( $network_id = null ) {
* *
* If the option does not exist, then the option will be added with the option value, * If the option does not exist, then the option will be added with the option value,
* with an `$autoload` value of 'yes'. * with an `$autoload` value of 'yes'.
* This function is designed to work with or without a logged-in user. In terms of security,
* plugin developers should check the current user's capabilities before updating any options.
* *
* @since 1.0.0 * @since 1.0.0
* @since 4.2.0 The `$autoload` parameter was added. * @since 4.2.0 The `$autoload` parameter was added.

View File

@ -13,7 +13,7 @@
* *
* @global string $wp_version * @global string $wp_version
*/ */
$wp_version = '5.3-alpha-46119'; $wp_version = '5.3-alpha-46120';
/** /**
* Holds the WordPress DB revision, increments when changes are made to the WordPress DB schema. * Holds the WordPress DB revision, increments when changes are made to the WordPress DB schema.