/** WordPress Administration Bootstrap */
require_once('admin.php');
+if ( ! current_user_can('activate_plugins') )
+ wp_die(__('You do not have sufficient permissions to manage plugins for this blog.'));
+
if ( isset($_POST['clear-recent-list']) )
$action = 'clear-recent-list';
elseif ( !empty($_REQUEST['action']) )
if ( !empty($action) ) {
switch ( $action ) {
case 'activate':
+ if ( ! current_user_can('activate_plugins') )
+ wp_die(__('You do not have sufficient permissions to activate plugins for this blog.'));
+
check_admin_referer('activate-plugin_' . $plugin);
$result = activate_plugin($plugin, 'plugins.php?error=true&plugin=' . $plugin);
exit;
break;
case 'activate-selected':
+ if ( ! current_user_can('activate_plugins') )
+ wp_die(__('You do not have sufficient permissions to activate plugins for this blog.'));
+
check_admin_referer('bulk-manage-plugins');
$plugins = (array) $_POST['checked'];
exit;
break;
case 'error_scrape':
+ if ( ! current_user_can('activate_plugins') )
+ wp_die(__('You do not have sufficient permissions to activate plugins for this blog.'));
+
check_admin_referer('plugin-activation-error_' . $plugin);
$valid = validate_plugin($plugin);
exit;
break;
case 'deactivate':
+ if ( ! current_user_can('activate_plugins') )
+ wp_die(__('You do not have sufficient permissions to deactivate plugins for this blog.'));
+
check_admin_referer('deactivate-plugin_' . $plugin);
deactivate_plugins($plugin);
update_option('recently_activated', array($plugin => time()) + (array)get_option('recently_activated'));
exit;
break;
case 'deactivate-selected':
+ if ( ! current_user_can('activate_plugins') )
+ wp_die(__('You do not have sufficient permissions to deactivate plugins for this blog.'));
+
check_admin_referer('bulk-manage-plugins');
$plugins = (array) $_POST['checked'];