[wp-trac] Re: [WordPress Trac] #4422: Anyone can delete attachments

[WordPress Trac]

#4422: Anyone can delete attachments
-----------------------+----------------------------------------------------
 Reporter:  xknown     |        Owner:  josephscott
     Type:  defect     |       Status:  new        
 Priority:  high       |    Milestone:  2.2.2      
Component:  Security   |      Version:  2.2        
 Severity:  critical   |   Resolution:             
 Keywords:  has-patch  |  
-----------------------+----------------------------------------------------
Comment (by josephscott):

 My diff pushes the overwrite feature even further down, to just before the
 upload gets saved.

-- 
Ticket URL: <http://trac.wordpress.org/ticket/4422#comment:3>
WordPress Trac <http://trac.wordpress.org/>
WordPress blogging software