Changeset 25121
- Timestamp:
- 08/26/2013 03:39:12 PM (11 years ago)
- File:
-
- 1 edited
Legend:
- Unmodified
- Added
- Removed
-
trunk/src/wp-comments-post.php
r25001 r25121 61 61 $comment_author_email = wp_slash( $user->user_email ); 62 62 $comment_author_url = wp_slash( $user->user_url ); 63 if ( current_user_can( 'unfiltered_html') ) {64 if ( wp_create_nonce( 'unfiltered-html-comment_' . $comment_post_ID) != $_POST['_wp_unfiltered_html_comment'] ) {63 if ( current_user_can( 'unfiltered_html' ) && isset( $_POST['_wp_unfiltered_html_comment'] ) ) { 64 if ( wp_create_nonce( 'unfiltered-html-comment_' . $comment_post_ID ) != $_POST['_wp_unfiltered_html_comment'] ) { 65 65 kses_remove_filters(); // start with a clean slate 66 66 kses_init_filters(); // set up the filters
Note: See TracChangeset
for help on using the changeset viewer.