Patch code sample: Broken Access Control vulnerability

patch-code-sample-broken-access-control.php

<?php 

  public function get_content_editor() {

          if (current_user_can('edit_posts')) {
                  $content_key  = $this->request['key'];
                  $content_type = $this->request['type'];
                  $builder_post_title = 'dynamic-content-' . $content_type . '-' . $content_key;
                  $builder_post_id    = Utils::get_page_by_title( $builder_post_title, 'elementskit_content' );

                  if ( is_null( $builder_post_id ) ) {
                          $defaults        = array(
                                  'post_content' => '',
                                  'post_title'   => $builder_post_title,
                                  'post_status'  => 'publish',
                                  'post_type'    => 'elementskit_content',
                          );
                          $builder_post_id = wp_insert_post( $defaults );
                          update_post_meta( $builder_post_id, '_wp_page_template', 'elementor_canvas' );
                  } else {
                          $builder_post_id = $builder_post_id->ID;
                  }
          } else {
                  wp_die( esc_html__( 'You are not allowed to access this page.', 'elementskit-lite' ) );
          }

          // if wpml is active and wpml not set for this post
          if ( defined( 'ICL_SITEPRESS_VERSION' ) ) {
                  $builder_post_id = $this->set_wpml_data($builder_post_id);
          }

          $url = admin_url( 'post.php?post=' . $builder_post_id . '&action=elementor' );
          wp_safe_redirect( $url );
          exit;

  }