[wp-trac] [WordPress Trac] #16129: Incorrect cap check in wp-admin/includes/comment.php : edit_comment()
WordPress Trac
wp-trac at lists.automattic.com
Thu Jan 6 22:43:09 UTC 2011
#16129: Incorrect cap check in wp-admin/includes/comment.php : edit_comment()
----------------------------+------------------
Reporter: westi | Owner:
Type: defect (bug) | Status: new
Priority: normal | Milestone: 3.1
Component: Administration | Version: 3.1
Severity: normal | Resolution:
Keywords: |
----------------------------+------------------
Description changed by ocean90:
Old description:
> Checks current_user_can( 'edit_post', $comment_post_ID )
>
> But should be current_user_can( 'edit_comment', (int)
> $_POST['comment_ID'] )
New description:
Checks current_user_can( 'edit_post', $comment_post_ID )
But should be current_user_can( 'edit_comment', (int)
$_POST!['comment_ID'] )
--
--
Ticket URL: <http://core.trac.wordpress.org/ticket/16129#comment:1>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software
More information about the wp-trac
mailing list