Changeset 9476

Timestamp:

02/06/2020 03:21:28 AM (7 years ago)

Author:

dd32

Message:

Support Forums: Don't show user term subscriptions to other users.

This wasn't intentional, but it was possible to find another users term/plugin/theme subscriptions.

See #4981.

File:

• sites/trunk/wordpress.org/public_html/wp-content/plugins/wporg-bbp-term-subscription/inc/class-plugin.php (modified) (1 diff)

sites/trunk/wordpress.org/public_html/wp-content/plugins/wporg-bbp-term-subscription/inc/class-plugin.php

@@ -392 +392 @@
                         return;
                 }
+
+                // Don't display the subscriptions unless it's the current user, or they can edit that user.
+                if ( ! bbp_is_user_home() && ! current_user_can( 'edit_user', bbp_get_displayed_user_id() ) ) {
+                        return;
+                }
+
                 $terms = self::get_user_taxonomy_subscriptions( $user_id, $this->taxonomy );
                 ?>