Changeset 1731851

Timestamp:

09/18/2017 07:14:09 PM (9 years ago)

Author:

travislopes

Message:

Share Drafts Publicly (1.1.5)

• Added security enhancements.

Location:

share-drafts-publicly

Files:

• tags/1.1.5 (added)
• tags/1.1.5/css (added)
• tags/1.1.5/css/share-drafts-publicly.css (added)
• tags/1.1.5/js (added)
• tags/1.1.5/js/share-drafts-publicly.js (added)
• tags/1.1.5/readme.txt (added)
• tags/1.1.5/share-drafts-publicly.php (added)
• trunk/readme.txt (modified) (1 diff)
• trunk/share-drafts-publicly.php (modified) (3 diffs)

share-drafts-publicly/trunk/readme.txt

@@ -26 +26 @@
 
 == Changelog ==
+= v1.1.5 =
+* Added security enhancements.
 = v1.1.4 =
 * Added security enhancements.

share-drafts-publicly/trunk/share-drafts-publicly.php

@@ -3 +3 @@
 Plugin Name: Share Drafts Publicy
 Description: Provide a secret link to non-logged in users to view post drafts.
-Version: 1.1.4
+Version: 1.1.5
 Author: Travis Lopes
 Author URI: http://travislop.es
@@ -352 +352 @@
     public function make_draft_private( $post_id = 0 ) {
 
+        // If user does not have capability to edit posts, return.
+        if ( ! current_user_can( 'edit_post', $post_id ) ) {
+            return false;
+        }
+
         // Delete post meta.
         return delete_post_meta( $post_id, '_draft_secret_key' );
@@ -371 +376 @@
     public function make_draft_public( $post_id = 0 ) {
 
+        // If user does not have capability to edit posts, return.
+        if ( ! current_user_can( 'edit_post', $post_id ) ) {
+            return false;
+        }
+
         // Generate secret key.
         $secret_key = wp_generate_password( 6, false, false );