Changeset 47918 for branches/5.1/src/wp-includes/comment.php

Timestamp:

06/06/2020 10:07:01 AM (5 years ago)

Author:

SergeyBiryukov

Message:

Comments: Ensure that unmoderated comments won't be search indexed.

After a comment is submitted, only allow a brief window where the comment is live on the site.

Props jonkolbert, ayeshrajans, Asif2BD, peterwilsoncc, imath, audrasjb, jonoaldersonwp, whyisjake, SergeyBiryukov.
Merges [47887] and [47889] to the 5.1 branch.
Fixes #49956.

Location:

branches/5.1

Files:

• . (modified) (1 prop)
• src/wp-includes/comment.php (modified) (1 diff)

branches/5.1/src/wp-includes/comment.php

@@ -1786 +1786 @@
 
         if ( $comment && hash_equals( $_GET['moderation-hash'], wp_hash( $comment->comment_date_gmt ) ) ) {
-            $commenter_email = $comment->comment_author_email;
+            // The comment will only be viewable by the comment author for 1 minute.
+            $comment_preview_expires = strtotime( $comment->comment_date_gmt . '+1 minute' );
+
+            if ( time() < $comment_preview_expires ) {
+                $commenter_email = $comment->comment_author_email;
+            }
         }
     }