[wp-trac] [WordPress Trac] #23939: Wrong capability check in wp_ajax_replyto_comment
WordPress Trac
noreply at wordpress.org
Thu Apr 4 19:49:59 UTC 2013
#23939: Wrong capability check in wp_ajax_replyto_comment
--------------------------+------------------------------
Reporter: fgauthier | Owner:
Type: defect (bug) | Status: new
Priority: normal | Milestone: Awaiting Review
Component: Comments | Version: trunk
Severity: normal | Resolution:
Keywords: has-patch |
--------------------------+------------------------------
Comment (by fgauthier):
I see, thanks for the explanation.
Then I guess my question is, why don't we check the comment ID instead? It
would make more sense in IMHO given that this function approves comments.
I updated the patch to check the comment id instead of the post id.
--
Ticket URL: <http://core.trac.wordpress.org/ticket/23939#comment:4>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software
More information about the wp-trac
mailing list