Changeset 3903 for branches/2.0/wp-includes/comment-functions.php

Timestamp:

06/22/2006 10:09:17 PM (19 years ago)

Author:

ryan

Message:

wp_get_current_commenter()

File:

• branches/2.0/wp-includes/comment-functions.php (modified) (3 diffs)

branches/2.0/wp-includes/comment-functions.php

@@ -6 +6 @@
     global $wp_query, $withcomments, $post, $wpdb, $id, $comment, $user_login, $user_ID, $user_identity;
 
-    if ( is_single() || is_page() || $withcomments ) :
-        $req = get_settings('require_name_email');
-        $comment_author = '';
-        if ( isset($_COOKIE['comment_author_'.COOKIEHASH]) ) {
-            $comment_author = apply_filters('pre_comment_author_name', $_COOKIE['comment_author_'.COOKIEHASH]);
-            $comment_author = stripslashes($comment_author);
-            $comment_author = wp_specialchars($comment_author, true);
-        }
-        $comment_author_email = '';
-        if ( isset($_COOKIE['comment_author_email_'.COOKIEHASH]) ) {
-            $comment_author_email = apply_filters('pre_comment_author_email', $_COOKIE['comment_author_email_'.COOKIEHASH]);
-            $comment_author_email = stripslashes($comment_author_email);
-            $comment_author_email = wp_specialchars($comment_author_email, true);       
-        }
-        $comment_author_url = '';
-        if ( isset($_COOKIE['comment_author_url_'.COOKIEHASH]) ) {
-            $comment_author_url = apply_filters('pre_comment_author_url', $_COOKIE['comment_author_url_'.COOKIEHASH]);
-            $comment_author_url = stripslashes($comment_author_url);
-            $comment_author_url = wp_specialchars($comment_author_url, true);       
-        }
-
+    if ( ! (is_single() || is_page() || $withcomments) )
+        return;
+
+    $req = get_settings('require_name_email');
+    $commenter = wp_get_current_commenter();
+    extract($commenter);
+
+    // TODO: Use API instead of SELECTs.
     if ( empty($comment_author) ) {
         $comments = $wpdb->get_results("SELECT * FROM $wpdb->comments WHERE comment_post_ID = '$post->ID' AND comment_approved = '1' ORDER BY comment_date");
@@ -41 +28 @@
     else
         require( ABSPATH . 'wp-content/themes/default/comments.php');
-
-    endif;
 }
 
@@ -909 +894 @@
 }
 
+function sanitize_comment_cookies() {
+    if ( isset($_COOKIE['comment_author_'.COOKIEHASH]) ) {
+        $comment_author = apply_filters('pre_comment_author_name', $_COOKIE['comment_author_'.COOKIEHASH]);
+        $comment_author = stripslashes($comment_author);
+        $comment_author = wp_specialchars($comment_author, true);
+        $_COOKIE['comment_author_'.COOKIEHASH] = $comment_author;
+    }
+
+    if ( isset($_COOKIE['comment_author_email_'.COOKIEHASH]) ) {
+        $comment_author_email = apply_filters('pre_comment_author_email', $_COOKIE['comment_author_email_'.COOKIEHASH]);
+        $comment_author_email = stripslashes($comment_author_email);
+        $comment_author_email = wp_specialchars($comment_author_email, true);   
+        $_COOKIE['comment_author_email_'.COOKIEHASH] = $comment_author_email;
+    }
+
+    if ( isset($_COOKIE['comment_author_url_'.COOKIEHASH]) ) {
+        $comment_author_url = apply_filters('pre_comment_author_url', $_COOKIE['comment_author_url_'.COOKIEHASH]);
+        $comment_author_url = stripslashes($comment_author_url);
+        $comment_author_url = wp_specialchars($comment_author_url, true);
+        $_COOKIE['comment_author_url_'.COOKIEHASH] = $comment_author_url;
+    }
+}
+
+function wp_get_current_commenter() {
+    // Cookies should already be sanitized.
+
+    $comment_author = '';
+    if ( isset($_COOKIE['comment_author_'.COOKIEHASH]) )
+        $comment_author = $_COOKIE['comment_author_'.COOKIEHASH];
+
+    $comment_author_email = '';
+    if ( isset($_COOKIE['comment_author_email_'.COOKIEHASH]) )
+        $comment_author_email = $_COOKIE['comment_author_email_'.COOKIEHASH];
+
+    $comment_author_url = '';
+    if ( isset($_COOKIE['comment_author_url_'.COOKIEHASH]) )
+        $comment_author_url = $_COOKIE['comment_author_url_'.COOKIEHASH];
+
+    return compact('comment_author', 'comment_author_email', 'comment_author_url');
+}
+
 ?>