Ticket #9211: widgets.diff

wp-includes/widgets.php

@@ -1387 +1387 @@
                 $number = 1;
         else if ( $number > 15 )
                 $number = 15;
+        $can_read_priv_posts=current_user_can('read_private_posts')?"OR p.post_type='post'":"";
+        $can_read_priv_pages=current_user_can('read_private_pages')?"OR p.post_type='page'":"";
 
         if ( !$comments = wp_cache_get( 'recent_comments', 'widget' ) ) {
-                $comments = $wpdb->get_results("SELECT * FROM $wpdb->comments WHERE comment_approved = '1' ORDER BY comment_date_gmt DESC LIMIT $number");
+                $comments = $wpdb->get_results("SELECT * FROM $wpdb->comments c LEFT JOIN $wpdb->posts p ON c.comment_post_id = p.ID WHERE c.comment_approved = '1' AND p.post_status<>'draft' AND (p.post_status<>'private' $can_read_priv_posts $can_read_priv_pages ) ORDER BY c.comment_date_gmt DESC LIMIT $number");
                 wp_cache_add( 'recent_comments', $comments, 'widget' );
         }
 ?>