Changeset 3327
- Timestamp:
- 10/28/2010 05:12:08 PM (15 years ago)
- File:
-
- 1 edited
Legend:
- Unmodified
- Added
- Removed
-
trunk/bp-themes/bp-default/_inc/ajax.php
r3311 r3327 206 206 global $bp; 207 207 208 / * Check the nonce */208 // Check the nonce 209 209 check_admin_referer( 'bp_activity_delete_link' ); 210 210 … … 214 214 } 215 215 216 if ( empty( $_POST['id'] ) || !is_numeric( $_POST['id'] ) ) 217 return false; 218 216 219 $activity = new BP_Activity_Activity( $_POST['id'] ); 217 220 218 / * Check access */221 // Check access 219 222 if ( !is_super_admin() && $activity->user_id != $bp->loggedin_user->id ) 220 223 return false; 221 224 222 if ( empty( $_POST['id'] ) || !is_numeric( $_POST['id'] ) ) 223 return false; 224 225 /* Call the action before the delete so plugins can still fetch information about it */ 225 // Call the action before the delete so plugins can still fetch information about it 226 226 do_action( 'bp_activity_action_delete_activity', $_POST['id'], $activity->user_id ); 227 227
Note: See TracChangeset
for help on using the changeset viewer.