Theme option editing capability problems

You should be posting your data (via <form action="" ...> to your theme options page, rather than to the wp-admin/options.php file. The latter is for the stuff under Settings.

Also, I don’t mean to be tossing dirt at anyone in particular, but always take the tips that you read on the web with a grain of salt. This post on the same site, as an example, offers extremely bad advice:

http://themeshaper.com/customize-blog-posts-touching-theme-files/

function myblog_shareontwitter($content) {

    print $content; ?>

    <p><a href="http://twitter.com/home?status=Currently reading <?php the_permalink(); ?>" title="Click to send this page to Twitter!" target="_blank">Share <em><?php the_title() ?></em> on Twitter</a></p>

<?php }
add_filter('the_content', 'myblog_shareontwitter');

The above code is completely broken: “the_content” is a filter, WP expects $content to be returned rather than echoed, and WP (not to mention plugins) expect $content to still be around after that function gets called. Moreover, the_title() will return garbage if you’re not in the loop; this is problematic in that automatically generating an excerpt outside of the loop will call “the_content”.


Related Posts:

  1. What action should I hook into when adding roles and capabilities?
  2. What’s the difference between Role and Meta capabilities; When to use map_meta_cap() filter
  3. Disable posts, only allow to edit existing pages, not create new ones (create_posts)
  4. How to get all capabilities of an existing user role
  5. Does the “promote_users” capability allow someone to create a new admin account?
  6. Editor role cannot save custom theme options
  7. Add Media Upload Capabilities Needed for Custom Role for non-Posts
  8. How can I prevent a writer from being able to edit an article that has been scheduled?
  9. Check whether user can delete a given post
  10. Allow unfiltered HTML in titles for low level users?
  11. Allow users to set a post author
  12. Unify the roles and caps?
  13. Filter list of rules based on a capability
  14. Using author_can() on custom post types in WordPress
  15. How to show a admin bar menu item only to users with certain capabilities?
  16. Assign multiple roles , overlapping capabilities
  17. WordPress remove capability post ,media completely for custom role
  18. Add capability to a role , so user is only able to view his own posts
  19. Role and Capabilities: How do I allow user role to access theme options without enabling ‘manage_options’?
  20. Is there a way of retrieving the core WP capabilities?
  21. Best Roles and Capability on a site with review features using a front end custom post
  22. Manage Roles and Capabilities on Multi-site
  23. How to create a clone role in wordpress
  24. Select subscriber as author of post in admin panel?
  25. How do I make a draft post accessible to everyone?
  26. User-edit role setting distinct from wp_capabilities? [closed]
  27. Allow roles below admin to add subscribers only
  28. Disallowing Users of a Custom Role from Deleting or Adding Administrators?
  29. Add Custom User Capabilities Before or After the Custom User Role has Been Added?
  30. How can I grant capabilities directly to users (not roles) in wp-admin?
  31. How to update user role without logout
  32. What exactly is WordPress?
  33. WordPress Capabilities: edit_user vs edit_users
  34. Allow authors to edit only certain users
  35. Do not allow users to create new posts and pages
  36. Capability to edit own posts and not others
  37. Do custom user roles have any default capabilities?
  38. Role that can edit only widgets, not other theme options
  39. How to programmatically add a user to a role?
  40. Remove upload_files capability from a role but allow role to manage an avatar image
  41. How to not allow custom roles to edit published custom post types?
  42. Listing all capabilities in dropdown is returning boolean
  43. Allow users to publish child pages of the pages they have access to edit
  44. How do I code access to the built-in UI of a CPT when it’s placed as submenu of another CPT that is protected by role?
  45. How to prevent users with “edit_others_posts” capability from editing admin posts
  46. How to get all users with Author role capabilities?
  47. Prevent author role from editing all posts in custom post type?
  48. Locking Down WordPress Application Password Permissions / Capabilities
  49. How can I have different groups of editors only allowed to edit certain parent+subpages?
  50. User capability of create page/new page
  51. Why do comment moderators need to have all create/edit/delete toboth posts and pages?
  52. current_user_can Not Always Working Properly
  53. current_user_can capabilities in the admin not working as expected
  54. Remove wordpress author’s capability to moderate comments on their own posts
  55. Getting users by specific capability, not role
  56. Update User Role
  57. Cannot attach media when capabilities added to custom post type
  58. Prevent Editors from Editing/Deleting Admin Accounts
  59. Role capability delete multiple post type posts doesn’t work
  60. How do you set up a WordPress blog with multiple authors to allow something like StackExchange’s “community wiki” feature?
  61. How come I see a manage_categories capability but not a manage_tags capability for any users?
  62. Define new user capability for custom post types?
  63. Allow Contributor to edit published post and filter by page id
  64. Applying roles to an admin sub-menu (eg Appearance -> Menus)
  65. Remove Capabilities from WP admin for specific user role
  66. Logout users upon login, based on caps/role?
  67. Show metabox for a special role
  68. Restrict Access to Posts based on Custom User and Post Meta Data
  69. upload_files cap to not loggen in users – add_cap to not logged in users
  70. Role capability issue
  71. Custom capabilities to add, edit, remove users of a particular role only?
  72. Restricting Pages based on Hierarchy and User Role
  73. Allow user to only access custom post type
  74. add_role user capability not working
  75. Restrict Capability of Administrator to Create, Edit and Delete Pages in Multisite
  76. Is it wise not to use only meta capabilities for certain basic post types?
  77. How can I promote a user to a network administrator?
  78. How to add custom JavaScript in functions?
  79. What capabilities are assigned to unauthenticated users?
  80. Capabilities Not Changing
  81. Menu page with minimum capability as ‘Subscriber’ doesn’t allow ‘Admin’ to access it?
  82. Role capabilities issue
  83. Want to know parameters that can be passed to user_can() for access control by user capabilities
  84. Create sub-administrator role that can do everything except use or see the code editor
  85. Assigning multiple or additional capabilities to specific users or how to create additional roles like bbpress roles?
  86. How To Create A File Archive in WordPress?
  87. User role editor – Add download files capability
  88. How to fix the Post Preview Button (CPT & map_meta_cap)
  89. Restrict Custom Post Type per role in Dashboard
  90. Restrict access to custom post type based on its taxonomy terms
  91. Allow contributor user role to perform copy operation PHP
  92. Enable plugins for a specific user role
  93. How can I create multiple different admin roles with their own capabilities
  94. Groups roles & capabilities
  95. How can I remove “Add new” button on custom post type
  96. Why does user_can return false for a capability during plugin deactivation?
  97. Capabilities and mapping required for a role to be able to edit other’s posts of a custom type, BUT only be able to edit their own blog posts
  98. Disable `create_post` for built-in post type
  99. Weird capabilities / roles behavior
  100. Subscriber role – blank page
tech