Skip to:
Content

BuddyPress.org

Changeset 2359 for trunk/bp-xprofile.php


Ignore:
Timestamp:
01/19/2010 03:34:06 PM (15 years ago)
Author:
apeatling
Message:

Fixes #1591 - accessing non-existent profile field groups.

File:
1 edited

Legend:

Unmodified
Added
Removed
  • trunk/bp-xprofile.php

    r2343 r2359  
    276276    global $bp;
    277277
    278     if ( !bp_is_home() && !is_site_admin() )
    279         return false;
     278    if ( !bp_is_my_profile() && !is_site_admin() )
     279        return false;
     280
     281    /* Make sure a group is set. */
     282    if ( empty( $bp->action_variables[1] ) )
     283        bp_core_redirect( $bp->displayed_user->domain . BP_XPROFILE_SLUG . '/edit/group/1' );
     284
     285    /* Check the field group exists */
     286    if ( !xprofile_get_field_group( $bp->action_variables[1] ) )
     287        bp_core_redirect( $bp->root_domain );
    280288
    281289    /* Check to see if any new information has been submitted */
    282     if ( isset($_POST['field_ids']) ) {
     290    if ( isset( $_POST['field_ids'] ) ) {
    283291
    284292        /* Check the nonce */
     
    556564
    557565function xprofile_get_field_group( $field_group_id ) {
    558     return new BP_XProfile_Group( $field_group_id );
     566    $field_group = new BP_XProfile_Group( $field_group_id );
     567
     568    if ( empty( $field_group->id ) )
     569        return false;
     570
     571    return $field_group;
    559572}
    560573
Note: See TracChangeset for help on using the changeset viewer.