Call auth_redirect() for customize.php. props ocean90. fixes #20872.

git-svn-id: https://develop.svn.wordpress.org/trunk@21019 602fd350-edb4-49c9-b593-d223f7449a82
2012-06-07 15:25:45 +00:00 · 2012-06-07 15:25:45 +00:00 · 39d7e1ccc9
parent 6fbd4a92f2
commit 39d7e1ccc9
1 changed files with 3 additions and 0 deletions
--- a/wp-includes/class-wp-customize-manager.php
+++ b/wp-includes/class-wp-customize-manager.php
@ -78,6 +78,9 @@ final class WP_Customize_Manager {
 	 * @since 3.4.0
 	 */
 	public function setup_theme() {
+		if ( is_admin() && ! defined( 'DOING_AJAX' ) )
+			auth_redirect();
+
 		send_origin_headers();

 		$this->original_stylesheet = get_stylesheet();