Changeset 5627 for trunk/src/includes/admin/converter.php

Timestamp:

03/06/2015 04:16:31 PM (12 years ago)

Author:

johnjamesjacoby

Message:

Add capability checks to admin-area ajax methods. Props jdgrimes. (trunk)

File:

• trunk/src/includes/admin/converter.php (modified) (1 diff)

trunk/src/includes/admin/converter.php

@@ -303 +303 @@
          */
         public function process_callback() {
+
+                // Bail if user cannot view import page
+                if ( ! current_user_can( 'bbp_tools_import_page' ) ) {
+                        wp_die( '0' );
+                }
 
                 // Verify intent