Changeset 10970

Timestamp:

04/17/2009 12:48:41 AM (16 years ago)

Author:

azaozz

Message:

Hide email addresses from low privilege users on the comments page, props mrmist, fixes #8801

File:

• trunk/wp-admin/includes/template.php (modified) (6 diffs)

trunk/wp-admin/includes/template.php

@@ -2066 +2066 @@
     $post = get_post($comment->comment_post_ID);
     $the_comment_status = wp_get_comment_status($comment->comment_ID);
+    $user_can = current_user_can('edit_post', $post->ID);
 
     $author_url = get_comment_author_url();
@@ -2103 +2104 @@
                 if ( !$checkbox ) break;
                 echo '<th scope="row" class="check-column">';
-                if ( current_user_can('edit_post', $post->ID) ) echo "<input type='checkbox' name='delete_comments[]' value='$comment->comment_ID' />";
+                if ( $user_can ) echo "<input type='checkbox' name='delete_comments[]' value='$comment->comment_ID' />";
                 echo '</th>';
                 break;
@@ -2114 +2115 @@
                 <div id="inline-<?php echo $comment->comment_ID; ?>" class="hidden">
                 <textarea class="comment" rows="3" cols="10"><?php echo $comment->comment_content; ?></textarea>
-                <div class="author-email"><?php echo attribute_escape( $comment->comment_author_email ); ?></div>
-                <div class="author"><?php echo attribute_escape( $comment->comment_author ); ?></div>
+                <div class="author-email"><?php if ( $user_can ) echo attribute_escape( $comment->comment_author_email ); ?></div>
+                <div class="author"><?php if ( $user_can ) echo attribute_escape( $comment->comment_author ); ?></div>
                 <div class="author-url"><?php echo attribute_escape( $comment->comment_author_url ); ?></div>
                 <div class="comment_status"><?php echo $comment->comment_approved; ?></div>
@@ -2122 +2123 @@
                 $actions = array();
 
-                if ( current_user_can('edit_post', $post->ID) ) {
+                if ( $user_can ) {
                     $actions['approve'] = "<a href='$approve_url' class='dim:the-comment-list:comment-$comment->comment_ID:unapproved:e7e7d3:e7e7d3:new=approved vim-a' title='" . __( 'Approve this comment' ) . "'>" . __( 'Approve' ) . '</a>';
                     $actions['unapprove'] = "<a href='$unapprove_url' class='dim:the-comment-list:comment-$comment->comment_ID:unapproved:e7e7d3:e7e7d3:new=unapproved vim-u' title='" . __( 'Unapprove this comment' ) . "'>" . __( 'Unapprove' ) . '</a>';
@@ -2165 +2166 @@
                 if ( !empty($author_url) )
                     echo "<a title='$author_url' href='$author_url'>$author_url_display</a><br />";
-                if ( current_user_can( 'edit_post', $post->ID ) ) {
+                if ( $user_can ) {
                     if ( !empty($comment->comment_author_email) ) {
                         comment_author_email_link();
@@ -2192 +2193 @@
                         $pending_comments = $_comment_pending_count[$post->ID] = $_comment_pending_count_temp[$post->ID];
                     }
-                    if ( current_user_can( 'edit_post', $post->ID ) ) {
+                    if ( $user_can ) {
                         $post_link = "<a href='" . get_edit_post_link($post->ID) . "'>";
                         $post_link .= get_the_title($post->ID) . '</a>';