Limit comments moderation 2
– how to show comments to the user with ‘Author’ role from his posts only;
– how to exclude unneeded views from ‘Comments’ page, left just ‘Approved’ for example.
Limit Comments moderation, part 2
April 22nd, 2012
– how to show comments to the user with ‘Author’ role from his posts only;
– how to exclude unneeded views from ‘Comments’ page, left just ‘Approved’ for example.
WordPress 3.3.2 Security Update
April 22nd, 2012
WP security update
– Limited privilege escalation where a site administrator could deactivate network-wide plugins when running a WordPress network under particular circumstances.
– Cross-site scripting vulnerability when making URLs clickable.
– Cross-site scripting vulnerabilities in redirects after posting comments in older browsers, and when filtering URLs.
Full list of changes made in version 3.3.2 is available here.
PHP delevelpers could see changes in source code directly using this link.
If you didn’t install this update yet, consider to do it right now. It’s very important to defend your lovely blog as much as possible.
Preview others posts without edit
April 11th, 2012
Preview Others Posts
You will need to add a new user capability, modify one file from WordPress core and add little piece of code to your theme functions.php file. Are you ready? Let’s go!
Choose right plugin name
April 8th, 2012
Choose plugin name
delete_users WordPress user capability
April 2nd, 2012
delete users
delete_users capability. Is it enough? No. In order to delete user, you need to select it from user list. Thus, you should have some other user capability. Yes, it is 'list_users' capability. Without such capability you can not access your blog users list (“Users->All Users” menu item) under single-site WordPress installation and can not apply “Delete” command to selected user. Continue reading to see more detailed description and (if you curious enough) look inside WordPress core source code to know where and how WordPress implements ‘delete_users’ security permission.
delete_themes WordPress user capability
March 19th, 2012
delete_themes
delete_themes user capability. It is clear from its name, isn’t it? You are right. But it is not full true. It’s useful to know, that if you have not switch_themes capability under single-site WordPress installation, you can not delete selected theme, even if you click ‘Delete’ command from WordPress interface. Interesting? Continue reading and see more detailed description or (if you curious enough) even look inside WordPress core source code together with me.I found
delete_themes capability in this WordPress core files:– wp-admin\themes.php;
– wp-admin\network\themes.php;
– wp-admin\includes\class-wp-ms-themes-list-table.php;
– wp-admin\includes\class-wp-themes-list-table.php;
– wp-includes\capabilities.php;
– wp-admin\includes\schema.php.
delete_plugins WordPress user capability
March 17th, 2012
Delete plugin
delete_plugins WordPress user capability allows user to delete not active plugins. Such user has to have access to the “Plugins” menu at WordPress administrator back-end (requires activate_plugins capability for that). In order to delete plugin user can use plugin row link, which is shown under each plugin name, or bulk action, applied to the selected set of plugins simultaneously.delete_plugins capability is used inside these WordPress core files:– wp-admin/plugins.php;
– wp-admin/includes/class-wp-plugins-list-table.php;
– wp-admin/includes/schema.php;
– wp-includes/capabilities.php;
Proceed reading if you wish to look inside WordPress core code and get more details.