Ticket #39730: 39730.3.patch

src/wp-admin/includes/ajax-actions.php

@@ -1100 +1100 @@
         }
 
         $comment_id = wp_new_comment( $commentdata );
+
+        if ( is_wp_error( $comment_id ) ) {
+                wp_die ( $comment_id->get_error_message() );
+        }
+
         $comment = get_comment($comment_id);
         if ( ! $comment ) wp_die( 1 );
 

tests/phpunit/tests/ajax/ReplytoComment.php

@@ -222 +222 @@
                 }
                 return $sql;
         }
+
+        /**
+         * @ticket 39730
+         */
+        public function test_pre_comments_approved () {
+                
+                // Become an administrator
+                $this->_setRole( 'administrator' );
+
+                // Set up a default request
+                $_POST['_ajax_nonce-replyto-comment'] = wp_create_nonce( 'replyto-comment' );
+                $_POST['content']                     = 'Lorem ipsum dolor sit amet, consectetur adipiscing elit.';
+                $_POST['comment_post_ID']             = self::$comment_post->ID;
+
+                // Simulate filter check error
+                add_filter ( 'pre_comment_approved', array( $this, '_pre_comment_approved_filter' ), 10, 2 );
+
+                // Make the request
+                $this->setExpectedException( 'WPAjaxDieStopException', 'pre_comment_approved filter fails for new comment' );
+                $this->_handleAjax( 'replyto-comment' );
+        }
+
+        /**
+         *  Block comments from being saved 'pre_comment_approved', by returning WP_Error
+         */
+        function _pre_comment_approved_filter ( $approved, $commentdata ) {
+                return new WP_Error( 'comment_wrong', __( 'pre_comment_approved filter fails for new comment' ), 403 );
+        }
 }

src/wp-trackback.php

@@ -126 +126 @@
 
         $commentdata = compact('comment_post_ID', 'comment_author', 'comment_author_email', 'comment_author_url', 'comment_content', 'comment_type');
 
-        wp_new_comment($commentdata);
+        $result = wp_new_comment($commentdata);
+
+        if ( is_wp_error( $result ) ) {
+                trackback_response( 1, $result->get_error_message() );
+        }
+
         $trackback_id = $wpdb->insert_id;
 
         /**

src/wp-includes/class-wp-xmlrpc-server.php

@@ -6505 +6505 @@
 
                 $comment_ID = wp_new_comment($commentdata);
 
+                if ( is_wp_error( $comment_ID ) ) {
+                        return $this->pingback_error( 0, $comment_ID->get_error_message() );
+                }
+
                 /**
                  * Fires after a post pingback has been sent.
                  *