[wp-trac] [WordPress Trac] #11810: Some users able to comment on unpublished posts
WordPress Trac
wp-trac at lists.automattic.com
Thu Jan 7 18:40:40 UTC 2010
#11810: Some users able to comment on unpublished posts
--------------------------+-------------------------------------------------
Reporter: ericmann | Owner:
Type: defect (bug) | Status: new
Priority: normal | Milestone: 2.9.2
Component: Comments | Version: 2.9.1
Severity: normal | Keywords: has-patch needs-testing
--------------------------+-------------------------------------------------
Comment(by filosofo):
Replying to [comment:14 ericmann]:
> It's not exactly a bug, but could be a problem. Logically, you should
only be able to comment on the post you're on ... not any post you want by
changing the post ID.
The problem is defining "post you're on" in a meaningful way, since HTTP
is stateless.
--
Ticket URL: <http://core.trac.wordpress.org/ticket/11810#comment:18>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software
More information about the wp-trac
mailing list