Changeset 6978 for sites/trunk/wordcamp.org/public_html/wp-content/mu-plugins/camptix-tweaks/addons/accommodations.php

Timestamp:

03/29/2018 11:03:20 PM (8 years ago)

Author:

coreymckrill

Message:

WordCamp tickets: Avoid permissions issue when generating email link

The notification emails for life-threatening allergies and special
accommodations are supposed to include a link to the attendee post, so the
organizer can find necessary details to follow up. However, using
get_edit_post_link() doesn't work when a non-site admin buys a ticket,
because the function checks if the current user can edit the post. This
generates the link manually instead.

File:

• sites/trunk/wordcamp.org/public_html/wp-content/mu-plugins/camptix-tweaks/addons/accommodations.php (modified) (2 diffs)

sites/trunk/wordcamp.org/public_html/wp-content/mu-plugins/camptix-tweaks/addons/accommodations.php

@@ -209 +209 @@
         $current_wordcamp = get_wordcamp_post();
         $wordcamp_name    = get_wordcamp_name( get_wordcamp_site_id( $current_wordcamp ) );
+        $post_type_object = get_post_type_object( $attendee->post_type );
+        $attendee_link    = add_query_arg( 'action', 'edit', admin_url( sprintf( $post_type_object->_edit_link, $attendee->ID ) ) );
         $handbook_link    = 'https://make.wordpress.org/community/handbook/wordcamp-organizer/first-steps/inclusive-and-welcoming-events/#requests-for-special-accommodations';
         $support_email    = 'support@wordcamp.org';
@@ -239 +241 @@
                 "%s\n\n%s\n\n%s\n\n%s",
                 $message_line_1,
-                get_edit_post_link( $attendee, 'plaintext' ), // Link to attendee post's Edit screen.
+                esc_url_raw( $attendee_link ), // Link to attendee post's Edit screen.
                 $message_line_2,
                 $handbook_link // Link to page in WordCamp Organizer Handbook.