Ticket #18104: wp-class-xmlrpc-server.18104.patch

wp-includes/class-wp-xmlrpc-server.php

@@ -1134 +1134 @@
                 if ( !current_user_can( 'moderate_comments' ) )
                         return new IXR_Error( 403, __( 'You are not allowed to moderate comments on this site.' ) );
 
+                if ( ! get_comment($comment_ID) )
+                        return new IXR_Error( 404, __( 'Invalid comment ID.' ) );
+
                 if ( !current_user_can( 'edit_comment', $comment_ID ) )
                         return new IXR_Error( 403, __( 'You are not allowed to moderate comments on this site.' ) );
 
                 do_action('xmlrpc_call', 'wp.deleteComment');
 
-                if ( ! get_comment($comment_ID) )
-                        return new IXR_Error( 404, __( 'Invalid comment ID.' ) );
-
                 return wp_delete_comment($comment_ID);
         }
 
@@ -1184 +1184 @@
                 if ( !current_user_can( 'moderate_comments' ) )
                         return new IXR_Error( 403, __( 'You are not allowed to moderate comments on this site.' ) );
 
+                if ( ! get_comment($comment_ID) )
+                        return new IXR_Error( 404, __( 'Invalid comment ID.' ) );
+
                 if ( !current_user_can( 'edit_comment', $comment_ID ) )
                         return new IXR_Error( 403, __( 'You are not allowed to moderate comments on this site.' ) );
 
                 do_action('xmlrpc_call', 'wp.editComment');
 
-                if ( ! get_comment($comment_ID) )
-                        return new IXR_Error( 404, __( 'Invalid comment ID.' ) );
-
                 if ( isset($content_struct['status']) ) {
                         $statuses = get_comment_statuses();
                         $statuses = array_keys($statuses);