← All changes | admin/advanced-settings/includes/fields/unique-display-name.php +7 -7 3.9.6 → 4.0.3 View file →

		@@ -1,16 +1,16 @@
1	1	<?php
	2	+// Exit if accessed directly
	3	+if ( ! defined( 'ABSPATH' ) ) exit;
2	4
3	5	function wppb_toolbox_unique_display_name_edit_profile( $message, $field, $request_data, $form_location ) {
4	6
5	7	if ( isset( $request_data['display_name']) ) {
6		- if ( isset( $_GET['edit_user'] ) ) {
7		- $user = get_userdata(sanitize_text_field($_GET['edit_user']));
8		- }
9		- else if ( isset( $request_data['user_id'] ) ) {
10		- $user = get_userdata($request_data['user_id']);
11		- }
12		- else {
	8	+ if( isset( $_REQUEST['edit_user'] ) && ( ( !is_multisite() && current_user_can( 'edit_users' ) ) || ( is_multisite() && ( current_user_can( 'remove_users' ) || current_user_can( 'manage_options' ) ) ) ) ){
	9	+ $user = get_userdata( absint( $_REQUEST['edit_user'] ) );
	10	+ } else if ( isset( $request_data['user_id'] ) ) {
	11	+ $user = get_userdata( $request_data['user_id'] );
	12	+ } else {
13	13	$user = wp_get_current_user();
14	14	}
15	15
16	16	if ( $request_data['display_name'] == $user->display_name )