how to block “add post”
-
hello I have blocked “add post” to users. but when activating the plugin it creates a new link: wp-admin / post-new.php? ip-geo-block-auth-nonce = 2b542b6987 the block stops working. any solution?
hola tengo bloqueado “a?adir post” a los usuarios. pero al activar el plugin crea un nuevo link: wp-admin/post-new.php?ip-geo-block-auth-nonce=2b542b6987 el bloqueo deja de funcionar. alguna solucion?
-
Hi @elchavodel8,
How do you prevent users to “add post”? I think that the normal way of WordPress is to use Roles and Capabilities to control what a user can do.
An additional query like “ip-geo-block-auth-nonce=xxxxxxxxxx” is necessary for this plugin to distinguish the requests between intended by an administrator or from outside by an attacker.
So, if you are exactly comparing the requested link to “/wp-admin/post-new.php”, please separate the additional query string.If you are exactly comparing the requested link to “/wp-admin/post-new.php”, a registered user can directly throw a request (by hand or some hacking took) to post some content instead of clicking the link.
So I recommend you to assign users a right capability and verify it using “current_user_can()“.
Once I closed this topic, but please feel free to ask something about your concerns.
Thank you for understanding.
- The topic ‘how to block “add post”’ is closed to new replies.
