← All changes | includes/Utils/Installer.php +1 -6 3.7.3 → 3.6.8 View file →

		@@ -126,14 +126,9 @@
126	126	$install_status = install_plugin_install_status( $api );
127	127	$plugin['plugin_file'] = $install_status['file'];
128	128	}
129	129
130		- // `$file` was never defined here — the plugin path lives in
131		- // $plugin['plugin_file'], and it is reassigned above when a fresh install
132		- // resolves a different one. The undefined name made is_plugin_inactive()
133		- // see null, which is never "active", so the guard silently collapsed to a
134		- // bare capability test. It failed closed, but it was not the check written.
135		- if ( !Helper::current_user_can( 'activate_plugins' ) && is_plugin_inactive( $plugin['plugin_file'] ) ) {
	130	+ if ( !Helper::current_user_can( 'activate_plugins' ) && is_plugin_inactive( $file ) ) {
136	131	$response['code'] = 'invalid_requirements';
137	132	$response['message'] = __( 'Sorry, you do not have permission to activate a plugin.', 'templately' );
138	133	return $response;
139	134	}