Changeset 5627 for trunk/src/includes/admin/converter.php

Timestamp:

03/06/2015 04:16:31 PM (11 years ago)

Author:

johnjamesjacoby

Message:

Add capability checks to admin-area ajax methods. Props jdgrimes. (trunk)

File:

• trunk/src/includes/admin/converter.php (modified) (1 diff)

trunk/src/includes/admin/converter.php

@@ -303 +303 @@
      */
     public function process_callback() {
+
+        // Bail if user cannot view import page
+        if ( ! current_user_can( 'bbp_tools_import_page' ) ) {
+            wp_die( '0' );
+        }
 
         // Verify intent