Validate post status against capabilities in press this. Props nacin. for 3.1

ryanboren · ryanboren · commit 7b45977ac501 · 2011-04-26T18:06:50.000Z
git-svn-id: https://develop.svn.wordpress.org/branches/3.1@17710 602fd350-edb4-49c9-b593-d223f7449a82
diff --git a/wp-admin/press-this.php b/wp-admin/press-this.php
@@ -56,7 +56,12 @@ function press_it() {
 		}
 	}
 	// set the post_content and status
-	$quick['post_status'] = isset($_POST['publish']) ? 'publish' : 'draft';
+	if ( isset( $_POST['publish'] ) && current_user_can( 'publish_posts' ) )
+		$quick['post_status'] = 'publish';
+	elseif ( isset( $_POST['review'] ) )
+		$quick['post_status'] = 'pending';
+	else
+		$quick['post_status'] = 'draft';
 	$quick['post_content'] = $content;
 	// error handling for media_sideload
 	if ( is_wp_error($upload) ) {

Original file line number	Diff line number	Diff line change
`@@ -56,7 +56,12 @@ function press_it() {`
`56`	`56`	`}`
`57`	`57`	`}`
`58`	`58`	`// set the post_content and status`
`59`		`- $quick['post_status'] = isset($_POST['publish']) ? 'publish' : 'draft';`
	`59`	`+ if ( isset( $_POST['publish'] ) && current_user_can( 'publish_posts' ) )`
	`60`	`+ $quick['post_status'] = 'publish';`
	`61`	`+ elseif ( isset( $_POST['review'] ) )`
	`62`	`+ $quick['post_status'] = 'pending';`
	`63`	`+ else`
	`64`	`+ $quick['post_status'] = 'draft';`
`60`	`65`	`$quick['post_content'] = $content;`
`61`	`66`	`// error handling for media_sideload`
`62`	`67`	`if ( is_wp_error($upload) ) {`