From bff52002b9840069b262e0e932b7d0cedfb47e43 Mon Sep 17 00:00:00 2001
From: Champ Camba <heychampsupertramp@gmail.com>
Date: Fri, 9 Dec 2016 12:23:52 +0800
Subject: [PATCH] Fix select options custom callback validation

---
 admin/core/um-admin-actions-ajax.php | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/admin/core/um-admin-actions-ajax.php b/admin/core/um-admin-actions-ajax.php
index 6568468a..34d7eb65 100644
--- a/admin/core/um-admin-actions-ajax.php
+++ b/admin/core/um-admin-actions-ajax.php
@@ -59,6 +59,10 @@
 
 		$arr_options = array();
 
+		if( ! current_user_can('manage_options') ){
+			wp_die( __( 'This is not possible for security reasons.','ultimatemember') );
+		}
+		
         $um_callback_func = $_POST['um_option_callback'];
         if( empty( $um_callback_func ) ){
         	$arr_options['status'] = 'empty';