diff --git a/wp-admin/options.php b/wp-admin/options.php index c7d6fc11b..d2b348a69 100644 --- a/wp-admin/options.php +++ b/wp-admin/options.php @@ -109,6 +109,8 @@ if ( 'update' == $action ) { if ( 'options' == $option_page ) $options = explode(',', stripslashes( $_POST[ 'page_options' ] )); + if( is_multisite() && !is_super_admin() ) + wp_die( __( 'Not allowed here' ) ); else $options = $whitelist_options[ $option_page ];