[wp-trac] Re: [WordPress Trac] #4344: Posting comments from external websites

[WordPress Trac]

#4344: Posting comments from external websites
-----------------------+----------------------------------------------------
 Reporter:  PsychoGun  |        Owner:  anonymous
     Type:  defect     |       Status:  closed   
 Priority:  high       |    Milestone:           
Component:  Security   |      Version:           
 Severity:  normal     |   Resolution:  invalid  
 Keywords:             |  
-----------------------+----------------------------------------------------
Comment (by ryan):

 WP injects a nonce into the comment form if your theme's comments template
 issues do_action('comment_form', $post->ID).  All comments templates
 should do this.  If that action is missing, the nonce will be missing.

-- 
Ticket URL: <http://trac.wordpress.org/ticket/4344#comment:24>
WordPress Trac <http://trac.wordpress.org/>
WordPress blogging software