sergiotarxz/Wordpress
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

add permission checks to grant/revoke_super_admin(), see #12109, related #12460

Browse Source 
git-svn-id: https://develop.svn.wordpress.org/trunk@14011 602fd350-edb4-49c9-b593-d223f7449a82
This commit is contained in:
Ron Rennick 2010-04-05 22:28:21 +00:00
parent 72e9f66ed4
commit 4b543dbc76
1 changed files with 13 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
wp-admin/includes/ms.php
View File

@ -807,6 +807,11 @@ function _admin_notice_multisite_activate_plugins_page() {
* @param $user_id * @param $user_id
*/ */
function grant_super_admin( $user_id ) { function grant_super_admin( $user_id ) {
global $current_user;
if ( $current_user->ID == $user_id || !current_user_can( 'manage_network_options' ) )
return;
$super_admins = get_site_option( 'site_admins', array( 'admin' ) ); $super_admins = get_site_option( 'site_admins', array( 'admin' ) );
$user = new WP_User( $user_id ); $user = new WP_User( $user_id );
@ -823,7 +828,15 @@ function grant_super_admin( $user_id ) {
* @param $user_id * @param $user_id
*/ */
function revoke_super_admin( $user_id ) { function revoke_super_admin( $user_id ) {
global $current_user;
if ( $current_user->ID == $user_id || !current_user_can( 'manage_network_options' ) )
return;
$super_admins = get_site_option( 'site_admins', array( 'admin' ) ); $super_admins = get_site_option( 'site_admins', array( 'admin' ) );
if ( count( $super_admins ) < 2 )
return;
$admin_email = get_site_option( 'admin_email' ); $admin_email = get_site_option( 'admin_email' );
$user = new WP_User( $user_id ); $user = new WP_User( $user_id );