Make WordPress Core

Opened 18 years ago

Closed 18 years ago

#3797 closed defect (bug) (fixed)

Requesting wp-comments-post.php with GET should return 405

Reported by: mikelittle's profile MikeLittle Owned by: ryan's profile ryan
Milestone: 2.2 Priority: low
Severity: normal Version: 2.0.9
Component: Administration Keywords: has-patch
Focuses: Cc:

Description

As pointed out by Elliotte Harold

http://comox.textdrive.com/pipermail/wp-hackers/2007-February/010722.html

if you request wp-comments-post.php with HTTP GET method, it returns 200 OK.

It should return 405 Method Not Allowed.

The RFC also calls for an 'Allowed' header when returning this status.

Attachments (3)

wp-comments-post.php-patch-trunk.patch (443 bytes) - added by MikeLittle 18 years ago.
Patch (against trunk) to fix this issue.
wp-comments-post.php-patch-2.0.patch (443 bytes) - added by MikeLittle 18 years ago.
Patch (against 2.0.9) to fix this issue
wp-comments-post.php-patch-2.1.patch (443 bytes) - added by MikeLittle 18 years ago.
Patch (against 2.1 branch) to fix this issue.

Download all attachments as: .zip

Change History (8)

@MikeLittle
18 years ago

Patch (against trunk) to fix this issue.

@MikeLittle
18 years ago

Patch (against 2.0.9) to fix this issue

@MikeLittle
18 years ago

Patch (against 2.1 branch) to fix this issue.

#1 @foolswisdom
18 years ago

  • Milestone changed from 2.3 to 2.1.2
  • Version set to 2.0.9

#2 @MikeLittle
18 years ago

  • Keywords has-patch added

#3 @foolswisdom
18 years ago

  • Milestone changed from 2.1.3 to 2.2

#4 @foolswisdom
18 years ago

  • Owner changed from anonymous to ryan

#5 @ryan
18 years ago

  • Resolution set to fixed
  • Status changed from new to closed

(In [5128]) Requesting wp-comments-post.php with GET should return 405. Props Mike Little. fixes #3797

Note: See TracTickets for help on using tickets.