Changeset 407 for trunk/b2comments.post.php

Timestamp:

10/03/2003 10:31:47 PM (22 years ago)

Author:

saxmatt

Message:

Some general comment code cleanup.

File:

• trunk/b2comments.post.php (modified) (4 diffs)

trunk/b2comments.post.php

@@ -22 +22 @@
 }
 
-$author = trim($HTTP_POST_VARS['author']);
-$email = trim($HTTP_POST_VARS['email']);
-$url = trim($HTTP_POST_VARS['url']);
+$author = trim(strip_tags($HTTP_POST_VARS['author']));
+
+$email = trim(strip_tags($HTTP_POST_VARS['email']));
+if (strlen($email) < 6)
+    $email = '';
+
+$url = trim(strip_tags($HTTP_POST_VARS['url']));
+$url = ((!stristr($url, '://')) && ($url != '')) ? 'http://'.$url : $url;
+if (strlen($url) < 7)
+    $url = '';
+
 $comment = trim($HTTP_POST_VARS['comment']);
 $original_comment = $comment;
-$comment_autobr = $HTTP_POST_VARS['comment_autobr'];
-$comment_post_ID = $HTTP_POST_VARS['comment_post_ID'];
+$comment_post_ID = intval($HTTP_POST_VARS['comment_post_ID']);
+$user_ip = $HTTP_SERVER_VARS['REMOTE_ADDR'];
+$user_domain = gethostbyaddr($user_ip);
 
 $commentstatus = $wpdb->get_var("SELECT comment_status FROM $tableposts WHERE ID = $comment_post_ID");
@@ -44 +53 @@
 }
 
-$user_ip = $HTTP_SERVER_VARS['REMOTE_ADDR'];
-$user_domain = gethostbyaddr($user_ip);
 $time_difference = get_settings('time_difference');
 $now = date('Y-m-d H:i:s',(time() + ($time_difference * 3600)));
 
-$author = trim(strip_tags($author));
-$email = trim(strip_tags($email));
-if (strlen($email) < 6)
-    $email = '';
-
-$url = trim(strip_tags($url));
-$url = ((!stristr($url, '://')) && ($url != '')) ? 'http://'.$url : $url;
-if (strlen($url) < 7)
-    $url = '';
-
-$comment = trim(strip_tags($comment, $comment_allowed_tags));
+$comment = strip_tags($comment, $comment_allowed_tags);
 $comment = balanceTags($comment, 1);
 $comment = convert_chars($comment);
@@ -74 +71 @@
 /* flood-protection */
 $lasttime = $wpdb->get_var("SELECT comment_date FROM $tablecomments WHERE comment_author_IP = '$user_ip' ORDER BY comment_date DESC LIMIT 1");
-$ok = 1;
+$ok = true;
 if (!empty($lasttime)) {
     $time_lastcomment= mysql2date('U', $lasttime);
     $time_newcomment= mysql2date('U', "$now");
     if (($time_newcomment - $time_lastcomment) < 10)
-        $ok = 0;
+        $ok = false;
 }
 /* end flood-protection */
@@ -87 +84 @@
 if ($ok) { // if there was no comment from this IP in the last 10 seconds
 
-    $wpdb->query("INSERT INTO $tablecomments VALUES ('0','$comment_post_ID','$author','$email','$url','$user_ip','$now','$comment','0')");
+    $wpdb->query("INSERT INTO $tablecomments VALUES ('0', '$comment_post_ID', '$author', '$email', '$url', '$user_ip', '$now', '$comment', '0')");
 
     if ($comments_notify) {