Changeset 3602

Timestamp:

11/13/2011 08:13:40 PM (12 years ago)

Author:

johnjamesjacoby

Message:

Prevent guest users from editing topics and replies if anonymous posting is active. See #1678. (2.0)

File:

• branches/2.0/bbp-includes/bbp-core-compatibility.php (modified) (2 diffs)

branches/2.0/bbp-includes/bbp-core-compatibility.php

@@ -1572 +1572 @@
 
             // Only allow super admins on multisite to edit every user.
-            if ( ( is_multisite() && !current_user_can( 'manage_network_users' ) && $user_id != $current_user->ID && !apply_filters( 'enable_edit_any_user_configuration', true ) ) || !current_user_can( 'edit_user', $user->ID ) ) {
+            if ( !is_user_logged_in() || ( is_multisite() && !current_user_can( 'manage_network_users' ) && ( $user->ID != bbp_get_current_user_id() ) && !apply_filters( 'enable_edit_any_user_configuration', true ) ) || !current_user_can( 'edit_user', $user->ID ) ) {
                 wp_die( __( 'You do not have the permission to edit this user.', 'bbpress' ) );
             }
@@ -1631 +1631 @@
     // Topic/Reply Edit Page
     } elseif ( !empty( $is_edit ) ) {
+
+        // Bail from edit if user is not logged in
+        if ( !is_user_logged_in() ) {
+            return;
+        }
 
         // We are editing a topic