Changeset 3600

Timestamp:

11/13/2011 08:07:43 PM (13 years ago)

Author:

johnjamesjacoby

Message:

Prevent guest users from editing topics and replies if anonymous posting is active. See #1678. (2.1)

File:

• branches/plugin/bbp-includes/bbp-core-compatibility.php (modified) (2 diffs)

branches/plugin/bbp-includes/bbp-core-compatibility.php

@@ -1686 +1686 @@
 
             // Only allow super admins on multisite to edit every user.
-            if ( ( is_multisite() && !current_user_can( 'manage_network_users' ) && ( $user->ID != bbp_get_current_user_id ) && !apply_filters( 'enable_edit_any_user_configuration', true ) ) || !current_user_can( 'edit_user', $user->ID ) ) {
+            if ( !is_user_logged_in() && ( ( is_multisite() && !current_user_can( 'manage_network_users' ) && ( $user->ID != bbp_get_current_user_id() ) && !apply_filters( 'enable_edit_any_user_configuration', true ) ) || !current_user_can( 'edit_user', $user->ID ) ) ) {
                 wp_die( __( 'You do not have permission to edit this user.', 'bbpress' ) );
             }
@@ -1748 +1748 @@
     // Topic/Reply Edit Page
     } elseif ( !empty( $is_edit ) ) {
+
+        // Bail from edit if user is not logged in
+        if ( !is_user_logged_in() )
+            return;
 
         // Get the post type from the main query loop