Undoing PK change, added check for logged in admin status instead to …

…hide full path disclosure
mindsharelabs · Aug 20, 2014 · 1be9110 · 1be9110
1 parent 7bf0b4b
commit 1be9110
Show file tree

Hide file tree

Showing 3 changed files with 10 additions and 4 deletions.
diff --git a/README.md b/README.md
@@ -10,6 +10,10 @@ Provides a library of additional template tags, 3rd-party libraries, and functio
 
 # Changelog:
 
+## 0.7.7
+
+Security update
+
 ## 0.7.6
 
 Fixed issue with favicon not being set, fix for DB_HOST having port number, PHP 5.3 fix

diff --git a/core/mapi-utility.php b/core/mapi-utility.php
@@ -602,7 +602,9 @@ function mapi_get_option($name = NULL) {
 	if($options && array_key_exists($name, $options)) {
 		return $options[$name];
 	} else {
-		return mapi_error(array('msg' => 'get_option returned FALSE', 'echo' => FALSE, 'die' => FALSE));
+		if(current_user_can('manage_options')) {
+			return mapi_error(array('msg' => 'get_option returned FALSE', 'echo' => FALSE, 'die' => FALSE));
+		}
 	}
 }
 

diff --git a/mindshare-api.php b/mindshare-api.php
@@ -4,7 +4,7 @@
 Plugin URI: http://mindsharelabs.com/downloads/mindshare-theme-api/
 Description: Provides a library of additional template tags, 3rd-party libraries, and functions for WordPress themes and additional features for WordPress CMS websites.
 Author: Mindshare Studios, Inc
-Version: 0.7.6
+Version: 0.7.7
 Author URI: http://mind.sh/are/
 Network: false
 */
@@ -18,7 +18,7 @@
 $MAPI_TLD = ''; // global variable for grabbing the base URL w/o subdomains in mapi_external_links() to reduce processor/memory usage
 
 if(!defined('MAPI_MIN_WP_VERSION')) {
-	define('MAPI_MIN_WP_VERSION', '3.5');
+	define('MAPI_MIN_WP_VERSION', '3.7');
 }
 
 if(!defined('MAPI_PLUGIN_NAME')) {
@@ -101,7 +101,7 @@ class Mindshare_API {
 		 *
 		 * @var string
 		 */
-		private $class_version = '0.7.6';
+		private $class_version = '0.7.7';
 
 		/**
 		 * Used for automatic updates