[wp-trac] Re: [WordPress Trac] #3643: Spam bots can still submit coments, even if the feature is disabled

WordPress Trac wp-trac at lists.automattic.com
Fri Mar 30 22:51:58 GMT 2007


#3643: Spam bots can still submit coments, even if the feature is disabled
-----------------------+----------------------------------------------------
 Reporter:  sendspace  |        Owner:  anonymous
     Type:  defect     |       Status:  reopened 
 Priority:  normal     |    Milestone:           
Component:  Security   |      Version:  2.1      
 Severity:  normal     |   Resolution:           
 Keywords:             |  
-----------------------+----------------------------------------------------
Changes (by glennr):

  * priority:  low => normal
  * status:  closed => reopened
  * resolution:  invalid =>

Comment:

 I had this problem also, and I am sure I set both the setting on the post,
 and in options to not allow comments. In addition, it was set to require a
 logged in user for commenting, and there are none.

 I'm no expert in php, so correct me if I'm wrong, but I don't think that
 script actually kills it.
 It is not die() in the code, it is wp_die(), a function set in
 wp_includes/functions.php.
 Looking at the code there, I see no reference to the actual "die()"
 function that would kill the script.
 Still looking around, I might be missing something, but I don't even see
 the functions.php file included in the wp_comments_post.php file.

 Reopening the ticket.

-- 
Ticket URL: <http://trac.wordpress.org/ticket/3643#comment:4>
WordPress Trac <http://trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list