Changeset 5799

Timestamp:

02/16/2012 10:36:14 PM (13 years ago)

Author:

djpaul

Message:

Don't allow direct url access to new activity caps file. See #4015

File:

• trunk/bp-xprofile/bp-xprofile-caps.php (modified) (4 diffs)

trunk/bp-xprofile/bp-xprofile-caps.php

@@ -7 +7 @@
  * @since 1.6
  */
+
+// Exit if accessed directly
+if ( ! defined( 'ABSPATH' ) ) exit;
 
 /**
@@ -27 +30 @@
         case 'bp_xprofile_change_field_visibility' :
             $caps = array( 'read' );
-            
+
             // You may pass args manually: $field_id, $profile_user_id
-            $field_id    = isset( $args[0] ) ? (int)$args[0] : bp_get_the_profile_field_id();
+            $field_id        = isset( $args[0] ) ? (int)$args[0] : bp_get_the_profile_field_id();
             $profile_user_id = isset( $args[1] ) ? (int)$args[1] : bp_displayed_user_id();
-            
+
             // Visibility on the fullname field is not editable
             if ( 1 == $field_id ) {
@@ -37 +40 @@
                 break;
             }
-            
+
             // Has the admin disabled visibility modification for this field?
             if ( 'disabled' == bp_xprofile_get_meta( $field_id, 'field', 'allow_custom_visibility' ) ) {
@@ -53 +56 @@
             break;
     }
-    
+
     return apply_filters( 'bp_xprofile_map_meta_caps', $caps, $cap, $user_id, $args );
 }
 add_filter( 'bp_map_meta_caps', 'bp_xprofile_map_meta_caps', 10, 4 );
-
 ?>