Changeset 10483

Timestamp:

12/02/2020 06:08:20 AM (5 years ago)

Author:

dd32

Message:

Theme Preview: Disable DB write attempts on admin-ajax.php requests too, see [10482].

File:

• sites/trunk/wp-themes.com/public_html/wp-content/mu-plugins/pub/disallow-db-writes.php (modified) (2 diffs)

sites/trunk/wp-themes.com/public_html/wp-content/mu-plugins/pub/disallow-db-writes.php

@@ -12 +12 @@
     // Borrowed from HyperDB, only SELECT queries are considered non-write
     if ( ! preg_match( '/^\s*(?:SELECT|SHOW|DESCRIBE|DESC|EXPLAIN)\s/i', $query ) ) {
-        if ( ! is_admin() && ! is_user_logged_in() ) {
+        if ( ! is_admin() || ! is_user_logged_in() ) {
             $query = '';
         }
@@ -22 +22 @@
 // Disable update_option() directly.
 add_filter( 'pre_update_option', function( $value, $option, $old_value ) {
-    if ( ! is_user_logged_in() && ! is_admin() ) {
+    if ( ! is_admin() || ! is_user_logged_in() ) {
         $value = $old_value;
     }