Multipost MU
[resolved] Subscribers can create blog posts (4 posts)

  1. Ed
    Posted 4 years ago #

    Bit of an odd one... If a user is a subscriber of a blog, it allows them to select the blog as one of their Multipost blogs when posting from one of their blogs and it actually posts. This is a bit disconcerting, I've had to disable and remove the plugin until this is fixed.


  2. Ed
    Posted 4 years ago #

    Anyone else with the same problem you can do a sloppy fix and change line 422 adding:

    if (current_user_can_for_blog($subBlogID, 'subscriber') == "1") {
    } else if (current_user_can_for_blog($subBlogID, 'contributor') == "1") {
    } else {

    Line 449:


    This will stop anyone who has a subscriber or contributor status on a blog being able to select those blogs to post to, this makes the plugin available to all users.

  3. Warren Harrison
    Plugin Author

    Posted 4 years ago #

    That's not good at all. Thanks for patching it.

    This plugin hasn't been updated in some time and is actually slated to be removed from the Plugin Directory.

    Sadly, I have no time to support the plugin and I don't want people risk security issues moving forward.

  4. Ed
    Posted 4 years ago #

    That's a shame, it's a really useful plugin for us. But it works so not too worried!


Topic Closed

This topic has been closed to new replies.

About this Plugin

About this Topic