From 596e012bbf1679a88db32b6553730a824968dde6 Mon Sep 17 00:00:00 2001 From: Ryan Boren Date: Sun, 6 Jun 2010 15:05:18 +0000 Subject: [PATCH] Don't allow promoting a user that doesn't already belong to the blog. git-svn-id: https://develop.svn.wordpress.org/trunk@15150 602fd350-edb4-49c9-b593-d223f7449a82 --- wp-admin/users.php | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/wp-admin/users.php b/wp-admin/users.php index b92f994122..63ad567bb3 100644 --- a/wp-admin/users.php +++ b/wp-admin/users.php @@ -74,6 +74,10 @@ case 'promote': continue; } + // If the user doesn't already belong to the blog, bail. + if ( !is_user_member_of_blog( $id ) ) + wp_die(__('Cheatin’ uh?')); + $user = new WP_User($id); $user->set_role($_REQUEST['new_role']); }