[wp-trac] Re: [WordPress Trac] #8672: XML RPC method bug in 2.7 in wp_newComment()

[WordPress Trac]

#8672: XML RPC method bug in 2.7 in wp_newComment()
------------------------------+---------------------------------------------
 Reporter:  screamingtoaster  |        Owner:  josephscott
     Type:  defect (bug)      |       Status:  new        
 Priority:  high              |    Milestone:  2.7.1      
Component:  XML-RPC           |      Version:  2.7        
 Severity:  critical          |   Resolution:             
 Keywords:                    |  
------------------------------+---------------------------------------------
Comment (by josephscott):

 Thanks for the detailed feedback on this.  After running through this a
 few more times I think that I've identified the problems.

 1- Only users with the 'moderate_comments' capability can submit comments.
 I believe the initial thought is that really only admin type users would
 submit comments via this method.  If a site choose to allow user
 registration though, it would be handy for any person with a valid account
 to submit comments.  To make that happen I've simply removed the
 capability check for non-anonymous comments.

 2- When anonymous comments are turned on, we weren't checking properly for
 the author_email and author_url fields.  Looks like a simple typo.

 I've included a patch to address both of these items.  Can you try this
 again with my patch and confirm that it fixes the problems you are seeing?
 Also please note that $allow_anon must be true in order for anonymous
 comments to be allowed.

-- 
Ticket URL: <http://trac.wordpress.org/ticket/8672#comment:3>
WordPress Trac <http://trac.wordpress.org/>
WordPress blogging software