Changeset 47888 for branches/5.4/src/wp-includes/comment.php

Timestamp:

06/02/2020 08:24:59 PM (5 years ago)

Author:

whyisjake

Message:

Comments: Ensure that unmoderated comments won't be search indexed.

After a comment is submitted, only allow a brief window where the comment is live on the site.

This brings the changes from [47887] to the 5.4 branch.

Fixes #49956.
Props: jonkolbert, ayeshrajans, Asif2BD, peterwilsoncc, imath, audrasjb, jonoaldersonwp, whyisjake.

File:

• branches/5.4/src/wp-includes/comment.php (modified) (1 diff)

branches/5.4/src/wp-includes/comment.php

@@ -1838 +1838 @@
 
         if ( $comment && hash_equals( $_GET['moderation-hash'], wp_hash( $comment->comment_date_gmt ) ) ) {
-            $commenter_email = $comment->comment_author_email;
+            // The comment will only be viewable by the comment author for 1 minute.
+            $comment_preview_expires = strtotime( $comment->comment_date_gmt . '+1 minute' );
+
+            if ( time() < $comment_preview_expires ) {
+                $commenter_email = $comment->comment_author_email;
+            }
         }
     }