Make WordPress Core

Opened 4 weeks ago

Last modified 8 days ago

#62066 assigned defect (bug)

Weird ability to modify comments to be empty

Reported by: lbones's profile lbones Owned by: lela-bones's profile Lela Bones
Milestone: Awaiting Review Priority: normal
Severity: minor Version:
Component: Comments Keywords:
Focuses: rest-api Cc:

Description (last modified by sabernhardt)

When I was viewing ticket #61244, I originally misinterpreted the issue. I thought that the user wanted to avoid exporting comments that have no content, but I realized that isn't actually allowed through the WordPress editor.

However, I was trying to recreate the empty comment issue, and realized that users are able to edit comments to be empty.

I did some initial digging and WP_REST_Comments_Controller has a create_item that contains this check:

		// Do not allow comments to be created with a non-default type.
		if ( ! empty( $request['type'] ) && 'comment' !== $request['type'] ) {
			return new WP_Error(
				'rest_invalid_comment_type',
				__( 'Cannot create a comment with that type.' ),
				array( 'status' => 400 )
			);
		}

and an update_item() function. I think that adding this or something similar to the update_item function would resolve this issue.

Attachments (1)

Screen Shot 2024-09-17 at 3.22.52 PM.png (272.8 KB) - added by lbones 4 weeks ago.
This is in PHP 8.2 and WP 6.6.2, and it shows that you can edit comments to be null.

Download all attachments as: .zip

Change History (4)

@lbones
4 weeks ago

This is in PHP 8.2 and WP 6.6.2, and it shows that you can edit comments to be null.

#1 @sabernhardt
4 weeks ago

  • Component changed from Posts, Post Types to Comments
  • Description modified (diff)
  • Focuses rest-api added
  • Keywords changes-requested removed

#2 @sabernhardt
3 weeks ago

  • Keywords needs-patch removed

Hi and welcome to WordPress Core Trac!

There are reasons to allow empty comments, especially when removing something, but the allow_empty_comment hook is false by default.

Related: #16979, r49303, ticket:58168#comment:4

#3 @hellofromTonya
8 days ago

  • Version 6.6.2 deleted

Doing triage today for tickets flagging 6.6.x as the version that introduced the reported issue. Tested with 6.3 and can edit to remove the comment's content. Removing the Version, as it predates 6.6.

Note: See TracTickets for help on using tickets.