Changeset 47887 for trunk/src/wp-includes/comment.php

Timestamp:

06/02/2020 08:10:02 PM (4 years ago)

Author:

whyisjake

Message:

Comments: Ensure that unmoderated comments won't be search indexed.

After a comment is submitted, only allow a brief window where the comment is live on the site.

Fixes #49956.
Props: jonkolbert, ayeshrajans, Asif2BD, peterwilsoncc, imath, audrasjb, jonoaldersonwp, whyisjake.

File:

• trunk/src/wp-includes/comment.php (modified) (1 diff)

trunk/src/wp-includes/comment.php

@@ -1853 +1853 @@
 
         if ( $comment && hash_equals( $_GET['moderation-hash'], wp_hash( $comment->comment_date_gmt ) ) ) {
-            $commenter_email = $comment->comment_author_email;
+            // The comment will only be viewable by the comment author for 1 minute.
+            $comment_preview_expires = strtotime( $comment->comment_date_gmt . '+1 minute' );
+
+            if ( time() < $comment_preview_expires ) {
+                $commenter_email = $comment->comment_author_email;
+            }
         }
     }