Changeset 34074

Timestamp:

09/12/2015 07:18:36 AM (11 years ago)

Author:

wonderboymusic

Message:

AJAX Reply to Comment: check the edit_comment cap when parent comment will be auto-approved.

Props rachelbaker.
Fixes #23939.

File:

• trunk/src/wp-admin/includes/ajax-actions.php (modified) (1 diff)

trunk/src/wp-admin/includes/ajax-actions.php

@@ -1012 +1012 @@
 
         if ( $parent && $parent->comment_approved === '0' && $parent->comment_post_ID == $comment_post_ID ) {
+            if ( ! current_user_can( 'edit_comment', $parent->comment_ID ) ) {
+                wp_die( -1 );
+            }
+
             if ( wp_set_comment_status( $parent->comment_ID, 'approve' ) )
                 $comment_auto_approved = true;