[wp-trac] [WordPress Trac] #14601: wp_new_comment method doesn't allow passed in values for IP and user-agent

[WordPress Trac]

#14601: wp_new_comment method doesn't allow passed in values for IP and user-agent
---------------------------------+--------------------
 Reporter:  mrutz                |       Owner:
     Type:  enhancement          |      Status:  new
 Priority:  normal               |   Milestone:  3.7
Component:  Comments             |     Version:  3.0.1
 Severity:  normal               |  Resolution:
 Keywords:  has-patch 3.2-early  |
---------------------------------+--------------------

Comment (by nacin):

 Is there a situation where $commentdata is actually just $_POST data? Is
 it unreasonable for a plugin to have done that? We need to make sure users
 can't control these values.

--
Ticket URL: <http://core.trac.wordpress.org/ticket/14601#comment:12>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software