Changeset 11711

Timestamp:

07/14/2009 07:59:52 AM (16 years ago)

Author:

azaozz

Message:

Fix converting of HTML entities in Quick editor for comments, don't output QE data when the user cannot edit comments, fixes #9935

Location:

trunk/wp-admin

Files:

• includes/template.php (modified) (1 diff)
• wp-admin.css (modified) (1 diff)

trunk/wp-admin/includes/template.php

@@ -2124 +2124 @@
                 printf(__('Submitted on <a href="%1$s">%2$s at %3$s</a>'), get_comment_link($comment->comment_ID), get_comment_date(__('Y/m/d')), get_comment_date(__('g:ia')));
                 echo '</div>';
-                comment_text(); ?>
+                comment_text(); 
+                if ( $user_can ) { ?>
                 <div id="inline-<?php echo $comment->comment_ID; ?>" class="hidden">
-                <textarea class="comment" rows="3" cols="10"><?php echo $comment->comment_content; ?></textarea>
-                <div class="author-email"><?php if ( $user_can ) echo esc_attr( $comment->comment_author_email ); ?></div>
-                <div class="author"><?php if ( $user_can ) echo esc_attr( $comment->comment_author ); ?></div>
+                <textarea class="comment" rows="1" cols="1"><?php echo htmlspecialchars($comment->comment_content, ENT_QUOTES); ?></textarea>
+                <div class="author-email"><?php echo esc_attr( $comment->comment_author_email ); ?></div>
+                <div class="author"><?php echo esc_attr( $comment->comment_author ); ?></div>
                 <div class="author-url"><?php echo esc_attr( $comment->comment_author_url ); ?></div>
                 <div class="comment_status"><?php echo $comment->comment_approved; ?></div>
                 </div>
                 <?php
+                }
                 $actions = array();
 

trunk/wp-admin/wp-admin.css

@@ -733 +733 @@
 }
 
-.column-comment p {
+.widefat .column-comment p {
     margin: 0.6em 0;
 }