Changeset 6097

Timestamp:

11/09/2017 02:06:01 AM (2 years ago)

Author:

iandunn

Message:

WordCamp Payments: Don't save payment details if they weren't displayed.

r6094 hid the payment details fields from users who do not need to see them. That introduced a bug where a few of the fields would be deleted if the post was later saved by a user who couldn't see the fields, because they wouldn't be present in $_POST.

File:

• sites/trunk/wordcamp.org/public_html/wp-content/plugins/wordcamp-payments/includes/wordcamp-budgets.php (modified) (1 diff)

sites/trunk/wordcamp.org/public_html/wp-content/plugins/wordcamp-payments/includes/wordcamp-budgets.php

@@ -485 +485 @@
      */
     public static function validate_save_payment_method_fields( $post_id, $meta_key_prefix ) {
+        if ( ! current_user_can( 'view_wordcamp_payment_details' ) ) {
+            return;
+        }
+
         foreach ( $_POST as $key => $unsafe_value ) {
             $unsafe_value = wp_unslash( $unsafe_value );