Changeset 1854 for trunk/wp-comments-post.php

Timestamp:

11/15/2004 06:20:28 AM (21 years ago)

Author:

rboren

Message:

Refuse comments for post IDs that do not exist.

File:

• trunk/wp-comments-post.php (modified) (1 diff)

trunk/wp-comments-post.php

@@ -36 +36 @@
 $user_ip = $_SERVER['REMOTE_ADDR'];
 
-if ( 'closed' ==  $wpdb->get_var("SELECT comment_status FROM $wpdb->posts WHERE ID = '$comment_post_ID'") )
+$post_status = $wpdb->get_var("SELECT comment_status FROM $wpdb->posts WHERE ID = '$comment_post_ID'");
+
+if ( empty($post_status) ) {
+    // Post does not exist.  Someone is trolling.  Die silently.
+    // (Perhaps offer pluggable rebukes? Long delays, etc.)
+    die();
+} else if ( 'closed' ==  $post_status ) {
     die( __('Sorry, comments are closed for this item.') );
+}
 
 if ( get_settings('require_name_email') && ('' == $email || '' == $author) )