From 68848f7970e51afd17c35c7693447ecc71569fa5 Mon Sep 17 00:00:00 2001 From: ryan Date: Sun, 6 Jun 2010 15:12:47 +0000 Subject: [PATCH] Cast to int git-svn-id: http://svn.automattic.com/wordpress/trunk@15151 1a063a9b-81f0-0310-95a4-ce76da25c4cd --- wp-admin/users.php | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/wp-admin/users.php b/wp-admin/users.php index 63ad567bb..cef468e5f 100644 --- a/wp-admin/users.php +++ b/wp-admin/users.php @@ -66,6 +66,8 @@ case 'promote': $userids = $_REQUEST['users']; $update = 'promote'; foreach ( $userids as $id ) { + $id = (int) $id; + if ( ! current_user_can('promote_user', $id) ) wp_die(__('You can’t edit that user.')); // The new role of the current user must also have promote_users caps @@ -106,6 +108,8 @@ case 'dodelete': $delete_count = 0; foreach ( (array) $userids as $id) { + $id = (int) $id; + if ( ! current_user_can( 'delete_user', $id ) ) wp_die(__( 'You can’t delete that user.' ) );