Changeset 48958

Timestamp:

09/08/2020 01:39:41 PM (4 years ago)

Author:

SergeyBiryukov

Message:

Comments: Check if a valid comment ID was passed when editing a comment.

This avoids a PHP notice after submitting the Edit Comment form.

Props regan.khadgi.
Fixes #51263.

File:

• trunk/src/wp-admin/comment.php (modified) (1 diff)

trunk/src/wp-admin/comment.php

@@ -37 +37 @@
 }
 
-$comment_id = absint( $_GET['c'] );
-$comment    = get_comment( $comment_id );
-
-// Prevent actions on a comment associated with a trashed post.
-if ( 'trash' === get_post_status( $comment->comment_post_ID ) ) {
-    wp_die(
-        __( 'You can’t edit this comment because the associated post is in the Trash. Please restore the post first, then try again.' )
-    );
+if ( isset( $_REQUEST['c'] ) ) {
+    $comment_id = absint( $_REQUEST['c'] );
+    $comment    = get_comment( $comment_id );
+
+    // Prevent actions on a comment associated with a trashed post.
+    if ( $comment && 'trash' === get_post_status( $comment->comment_post_ID ) ) {
+        wp_die(
+            __( 'You can’t edit this comment because the associated post is in the Trash. Please restore the post first, then try again.' )
+        );
+    }
+} else {
+    $comment = null;
 }