Changeset 3327

Timestamp:

10/28/2010 05:12:08 PM (16 years ago)

Author:

djpaul

Message:

Fix #2692, props calvin_42

File:

• trunk/bp-themes/bp-default/_inc/ajax.php (modified) (2 diffs)

trunk/bp-themes/bp-default/_inc/ajax.php

@@ -206 +206 @@
         global $bp;
 
-        /* Check the nonce */
+        // Check the nonce
         check_admin_referer( 'bp_activity_delete_link' );
 
@@ -214 +214 @@
         }
 
+        if ( empty( $_POST['id'] ) || !is_numeric( $_POST['id'] ) )
+                return false;
+
         $activity = new BP_Activity_Activity( $_POST['id'] );
 
-        /* Check access */
+        // Check access
         if ( !is_super_admin() && $activity->user_id != $bp->loggedin_user->id )
                 return false;
 
-        if ( empty( $_POST['id'] ) || !is_numeric( $_POST['id'] ) )
-                return false;
-
-        /* Call the action before the delete so plugins can still fetch information about it */
+        // Call the action before the delete so plugins can still fetch information about it
         do_action( 'bp_activity_action_delete_activity', $_POST['id'], $activity->user_id );