Subscribers can delete blog

Opps! Looks like someone set the user level that can see the link to that as " 0 ". Which would allow anyone to see that tab under options.

Look up the file wp-content/mu-plugins/delete-blog.php.

At line 21, change:

		add_submenu_page('options-general.php', __('Delete Blog'), __('Delete Blog'), 0, $pfile, array(&$this, 'plugin_content'));

to

		add_submenu_page('options-general.php', __('Delete Blog'), __('Delete Blog'), 10, $pfile, array(&$this, 'plugin_content'));

Next, at line 24, look for:

	function plugin_content() {
		global $wpdb, $current_blog, $current_site;
		$this->delete_blog_hash = get_settings('delete_blog_hash');

Replace with:

	function plugin_content() {
		global $wpdb, $current_blog, $current_site, $user_level;
	    get_currentuserinfo();
		if ($user_level <  10) {
			die("I don't think so, Tim.");
		}
		$this->delete_blog_hash = get_settings('delete_blog_hash');

That should fix it up so that only the blog's admin can see it, or use it.

Fixed in [833] by putting the perms in the add_submenu() function