Changeset 23907

Timestamp:

04/04/2013 06:44:38 PM (12 years ago)

Author:

nacin

Message:

Use get_post() in lieu of direct query in wp_ajax_replyto_comment(). fixes #23940.

File:

• trunk/wp-admin/includes/ajax-actions.php (modified) (1 diff)

trunk/wp-admin/includes/ajax-actions.php

@@ -725 +725 @@
 
     $comment_post_ID = (int) $_POST['comment_post_ID'];
+    $post = get_post( $comment_post_ID );
+    if ( ! $post )
+        wp_die( -1 );
+
     if ( !current_user_can( 'edit_post', $comment_post_ID ) )
         wp_die( -1 );
 
-    $status = $wpdb->get_var( $wpdb->prepare("SELECT post_status FROM $wpdb->posts WHERE ID = %d", $comment_post_ID) );
-
-    if ( empty($status) )
+    if ( empty( $post->post_status ) )
         wp_die( 1 );
-    elseif ( in_array($status, array('draft', 'pending', 'trash') ) )
+    elseif ( in_array($post->post_status, array('draft', 'pending', 'trash') ) )
         wp_die( __('ERROR: you are replying to a comment on a draft post.') );