| @@ -73,8 +73,13 @@ | ||
| 73 | 73 | return new WP_Error( 'validation-error', $uploaded_file->get_error_message() ); |
| 74 | 74 | |
| 75 | 75 | } else { |
| 76 | 76 | |
| 77 | + // Record this upload so the crop handler only accepts the user's own file. | |
| 78 | + if ( in_array( $field->htmlvar_name, array( 'avatar', 'banner' ), true ) && get_current_user_id() ) { | |
| 79 | + update_user_meta( get_current_user_id(), '_uwp_pending_' . $field->htmlvar_name . '_upload', $uploaded_file->url ); | |
| 80 | + } | |
| 81 | + | |
| 77 | 82 | $file_urls[] = array( |
| 78 | 83 | 'url' => $uploaded_file->url, |
| 79 | 84 | 'path' => $uploaded_file->path, |
| 80 | 85 | 'size' => $uploaded_file->size, |
