sergiotarxz/Wordpress
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Introduce DISALLOW_FILE_MOD for disabling all ops that modify core, theme, or plugins files. see #13000

Browse Source 
git-svn-id: https://develop.svn.wordpress.org/trunk@14088 602fd350-edb4-49c9-b593-d223f7449a82
This commit is contained in:
Ryan Boren 2010-04-14 17:22:11 +00:00
parent b9bdd0bfb1
commit 8e25b7d538
1 changed files with 8 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
wp-includes/capabilities.php
View File

@ -993,7 +993,6 @@ function map_meta_cap( $cap, $user_id ) {
break;
}
// Fall through if not DISALLOW_FILE_EDIT.
case 'unfiltered_html':
case 'update_plugins':
case 'delete_plugins':
case 'install_plugins':
@ -1001,6 +1000,14 @@ function map_meta_cap( $cap, $user_id ) {
case 'delete_themes':
case 'install_themes':
case 'update_core':
// Disallow anything that creates, deletes, or edits core, plugin, or theme files.
// Files in uploads are excepted.
if ( defined('DISALLOW_FILE_MODS') && DISALLOW_FILE_MODS ) {
$caps[] = 'do_not_allow';
break;
}
// Fall through if not DISALLOW_FILE_MODS.
case 'unfiltered_html':
case 'delete_user':
case 'delete_users':
// If multisite these caps are allowed only for super admins.