[wp-trac] [WordPress Trac] #11810: Some users able to comment on unpublished posts

WordPress Trac wp-trac at lists.automattic.com
Thu Jan 7 18:40:40 UTC 2010


#11810: Some users able to comment on unpublished posts
--------------------------+-------------------------------------------------
 Reporter:  ericmann      |       Owner:                         
     Type:  defect (bug)  |      Status:  new                    
 Priority:  normal        |   Milestone:  2.9.2                  
Component:  Comments      |     Version:  2.9.1                  
 Severity:  normal        |    Keywords:  has-patch needs-testing
--------------------------+-------------------------------------------------

Comment(by filosofo):

 Replying to [comment:14 ericmann]:
 > It's not exactly a bug, but could be a problem.  Logically, you should
 only be able to comment on the post you're on ... not any post you want by
 changing the post ID.

 The problem is defining "post you're on" in a meaningful way, since HTTP
 is stateless.

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/11810#comment:18>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list