[wp-trac] [WordPress Trac] #16129: Incorrect cap check in wp-admin/includes/comment.php : edit_comment()

WordPress Trac wp-trac at lists.automattic.com
Thu Jan 6 22:43:09 UTC 2011


#16129: Incorrect cap check in wp-admin/includes/comment.php : edit_comment()
----------------------------+------------------
 Reporter:  westi           |       Owner:
     Type:  defect (bug)    |      Status:  new
 Priority:  normal          |   Milestone:  3.1
Component:  Administration  |     Version:  3.1
 Severity:  normal          |  Resolution:
 Keywords:                  |
----------------------------+------------------
Description changed by ocean90:

Old description:

> Checks current_user_can( 'edit_post', $comment_post_ID )
>
> But should be current_user_can( 'edit_comment', (int)
> $_POST['comment_ID'] )

New description:

 Checks current_user_can( 'edit_post', $comment_post_ID )

 But should be current_user_can( 'edit_comment', (int)
 $_POST!['comment_ID'] )

--

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/16129#comment:1>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list