Changeset 2894 for trunk/wp-includes/comment-functions.php

Timestamp:

09/20/2005 03:17:43 AM (18 years ago)

Author:

ryan

Message:

wp_insert_comment(), wp_update_comment(), wp_allow_comment(), and wp_filter_comment() from skeltoac. fixes #1683

File:

• trunk/wp-includes/comment-functions.php (modified) (1 diff)

trunk/wp-includes/comment-functions.php

@@ -29 +29 @@
 
     endif;
+}
+
+function wp_new_comment( $commentdata ) {
+    $commentdata = apply_filters('preprocess_comment', $commentdata);
+
+    $commentdata['comment_post_ID'] = (int) $commentdata['comment_post_ID'];
+    $commentdata['comment_author_IP'] = $_SERVER['REMOTE_ADDR'];
+    $commentdata['comment_agent'] = $_SERVER['HTTP_USER_AGENT'];
+    $commentdata['comment_date'] = current_time('mysql');
+    $commentdata['comment_date_gmt'] = current_time('mysql', 1);
+
+    $commentdata = wp_filter_comment($commentdata);
+
+    $commentdata['comment_approved'] = wp_allow_comment($commentdata);
+
+    $comment_ID = wp_insert_comment($commentdata);
+
+    do_action('comment_post', $comment_ID, $commentdata['approved']);
+
+    if ( 'spam' !== $commentdata['comment_approved'] ) { // If it's spam save it silently for later crunching
+        if ( '0' == $commentdata['comment_approved'] )
+            wp_notify_moderator($comment_ID);
+    
+        if ( get_settings('comments_notify') && $commentdata['comment_approved'] )
+            wp_notify_postauthor($comment_ID, $commentdata['comment_type']);
+    }
+
+    return $comment_id;
+}
+
+function wp_insert_comment($commentdata) {
+    global $wpdb;
+    extract($commentdata);
+
+    if ( ! isset($comment_author_IP) )
+        $comment_author_IP = $_SERVER['REMOTE_ADDR'];
+    if ( ! isset($comment_date) )
+        $comment_date = current_time('mysql');
+    if ( ! isset($comment_date_gmt) )
+        $comment_date_gmt = gmdate('Y-m-d H:i:s', strtotime($comment_date) );
+
+    $result = $wpdb->query("INSERT INTO $wpdb->comments 
+    (comment_post_ID, comment_author, comment_author_email, comment_author_url, comment_author_IP, comment_date, comment_date_gmt, comment_content, comment_approved, comment_agent, comment_type, comment_parent, user_id)
+    VALUES 
+    ('$comment_post_ID', '$comment_author', '$comment_author_email', '$comment_author_url', '$comment_author_IP', '$comment_date', '$comment_date_gmt', '$comment_content', '$comment_approved', '$comment_agent', '$comment_type', '$comment_parent', '$user_id')
+    ");
+
+    return $wpdb->insert_id;
+}
+
+function wp_filter_comment($commentdata) {
+    $commentdata['user_id'] = apply_filters('pre_user_id', $commentdata['user_ID']);
+    $commentdata['comment_agent'] = apply_filters('pre_comment_user_agent', $commentdata['comment_agent']);
+    $commentdata['comment_author'] = apply_filters('pre_comment_author_name', $commentdata['comment_author']);
+    $commentdata['comment_content'] = apply_filters('pre_comment_content', $commentdata['comment_content']);
+    $commentdata['comment_author_IP'] = apply_filters('pre_comment_user_ip', $commentdata['comment_author_IP']);
+    $commentdata['comment_author_url'] = apply_filters('pre_comment_author_url', $commentdata['comment_author_url']);
+    $commentdata['comment_author_email'] = apply_filters('pre_comment_author_email', $commentdata['comment_author_email']);
+    $commentdata['filtered'] = true;
+    return $commentdata;
+}
+
+function wp_allow_comment($commentdata) {
+    global $wpdb;
+    extract($commentdata);
+
+    $comment_user_domain = apply_filters('pre_comment_user_domain', gethostbyaddr($comment_author_ip) );
+
+    // Simple duplicate check
+    $dupe = "SELECT comment_ID FROM $wpdb->comments WHERE comment_post_ID = '$comment_post_ID' AND ( comment_author = '$comment_author' ";
+    if ( $comment_author_email )
+        $dupe .= "OR comment_author_email = '$comment_author_email' ";
+    $dupe .= ") AND comment_content = '$comment_content' LIMIT 1";
+    if ( $wpdb->get_var($dupe) )
+        die( __('Duplicate comment detected; it looks as though you\'ve already said that!') );
+
+    // Simple flood-protection
+    if ( $lasttime = $wpdb->get_var("SELECT comment_date_gmt FROM $wpdb->comments WHERE comment_author_IP = '$comment_author_IP' OR comment_author_email = '$comment_author_email' ORDER BY comment_date DESC LIMIT 1") ) {
+        $time_lastcomment = mysql2date('U', $lasttime);
+        $time_newcomment  = mysql2date('U', $comment_date_gmt);
+        if ( ($time_newcomment - $time_lastcomment) < 15 ) {
+            do_action('comment_flood_trigger', $time_lastcomment, $time_newcomment);
+            die( __('Sorry, you can only post a new comment once every 15 seconds. Slow down cowboy.') );
+        }
+    }
+
+    if ( $user_id ) {
+        $userdata = get_userdata($user_id);
+        $user = new WP_User($user_id);
+        $post_author = $wpdb->get_var("SELECT post_author FROM $wpdb->posts WHERE ID = '$comment_post_ID' LIMIT 1");
+    }
+
+    // The author and the admins get respect.
+    if ( $userdata && ( $user_id == $post_author || $user->has_cap('level_9') ) ) {
+        $approved = 1;
+    }
+
+    // Everyone else's comments will be checked.
+    else {
+        if ( check_comment($comment_author, $comment_author_email, $comment_author_url, $comment_content, $comment_author_IP, $comment_agent, $comment_type) )
+            $approved = 1;
+        else
+            $approved = 0;
+        if ( wp_blacklist_check($comment_author, $comment_author_email, $comment_author_url, $comment_content, $comment_author_IP, $comment_agent) )
+            $approved = 'spam';
+    }
+
+    $approved = apply_filters('pre_comment_approved', $approved);
+    return $approved;
+}
+
+
+function wp_update_comment($commentarr) {
+    global $wpdb;
+
+    // First, get all of the original fields
+    $comment = get_comment($commentarr['comment_ID'], ARRAY_A);
+
+    // Escape data pulled from DB.
+    foreach ($comment as $key => $value)
+        $comment[$key] = $wpdb->escape($value);
+
+    // Merge old and new fields with new fields overwriting old ones.
+    $commentarr = array_merge($comment, $commentarr);
+
+    // Now extract the merged array.
+    extract($commentarr);
+
+    $comment_content = apply_filters('comment_save_pre', $comment_content);
+
+    $result = $wpdb->query(
+        "UPDATE $wpdb->comments SET
+            comment_content = '$comment_content',
+            comment_author = '$comment_author',
+            comment_author_email = '$comment_author_email',
+            comment_approved = '$comment_approved',
+            comment_author_url = '$comment_author_url',
+            comment_date = '$comment_date'
+        WHERE comment_ID = $comment_ID" );
+
+    $rval = $wpdb->rows_affected;
+
+    do_action('edit_comment', $comment_ID);
+
+    return $rval;   
 }