[wp-trac] Re: [WordPress Trac] #7435: Reply to comments from admin
WordPress Trac
wp-trac at lists.automattic.com
Tue Aug 26 22:10:19 GMT 2008
#7435: Reply to comments from admin
----------------------------+-----------------------------------------------
Reporter: ryan | Owner: azaozz
Type: enhancement | Status: new
Priority: normal | Milestone: 2.7
Component: Administration | Version:
Severity: normal | Resolution:
Keywords: blessed |
----------------------------+-----------------------------------------------
Comment (by caesarsgrunt):
Replying to [comment:5 azaozz]:
> Could probably add another filter for the textarea tag, however
replacing all of the html would give the plugin complete control of how
the popup works/looks and would probably be more compatible down the road.
>
I think the default form code should passed to the existing filter,
allowing plugins to either replace it entirely or just change it slightly
and return it. Just like most other WP filters.
> Don't think this is a good idea. For single user blogs it wouldn't
matter much but for multi-user blogs, one logged-in user pretending to be
another user.. Not good.
I didn't mean the default form should alow this, I just meant the PHP
script which handles the AJAX submission should support POSTed values for
all comment metadata. Plugins can do the rest.[[BR]]
Regarding the specific security issue you mention, the plugin I am
developing only allows admins to submit comments 'from' other users. I
need it for my own blog because users often email me and then ask me to
post the email as a comment from them...
> > Third, I think the form should be inserted in another tr below the
comment being replied to.
> Yes, replying to comments would really benefit from comment threading.
Can insert the reply under the comment with just a small change to the
current code, however it would be confusing as it won't show there on the
blog.
I meant the ''reply form'' as a row in the table, not my submitted reply
below the replyed-to comment. Like in my plugin. Interesting that you had
it like that and changed it...
> Looking at your plugin: there used to be a "Go back" button after error
in an earlier design, but what would the user do when going back? The only
possible actions would be either to resubmit the comment resulting in a
duplicate comment/another error, or to cancel it.
Two reasons. First, if the user clicked submit by mistake when the comment
was blank. But I suppose they could just close and open it again if
so.[[BR]]
More importantly, what if the internet connection goes down or times out
whilst submitting the comment? If you just close the form the comment will
be lost, since when the form is reopened it is cleared. Clicking my 'Go
Back' button, however, just un-hides the form field, with it's existing
contents still in it. For me, on my slow internet connection (I live on a
boat), this is a major consideration - and probably for plenty of other
people too.
--
Ticket URL: <http://trac.wordpress.org/ticket/7435#comment:6>
WordPress Trac <http://trac.wordpress.org/>
WordPress blogging software
More information about the wp-trac
mailing list