From 39c598f7f6137be66838c73fc91d5d69c5ac25d8 Mon Sep 17 00:00:00 2001 From: Ryan Boren Date: Mon, 25 Jan 2010 22:50:36 +0000 Subject: [PATCH] add a cap check at the top of ms-delete-site.php. see #11644 git-svn-id: https://develop.svn.wordpress.org/trunk@12829 602fd350-edb4-49c9-b593-d223f7449a82 --- wp-admin/ms-delete-site.php | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/wp-admin/ms-delete-site.php b/wp-admin/ms-delete-site.php index dec358b084..293815b731 100644 --- a/wp-admin/ms-delete-site.php +++ b/wp-admin/ms-delete-site.php @@ -4,6 +4,10 @@ require_once('admin.php'); if ( !is_multisite() ) wp_die( __('Multisite support is not enabled.') ); +// @todo Create a delete blog cap. +if ( ! current_user_can('manage_options') ) + wp_die(__('You do not have sufficient permissions to delete this blog.')); + $action = isset($_POST['action']) ? $_POST['action'] : 'splash'; $title = __('Delete Blog');