From a6f951101c494d3abca2b3f22028888c31aeb7d2 Mon Sep 17 00:00:00 2001 From: rboren Date: Mon, 15 Nov 2004 06:20:28 +0000 Subject: [PATCH] Refuse comments for post IDs that do not exist. git-svn-id: http://svn.automattic.com/wordpress/trunk@1854 1a063a9b-81f0-0310-95a4-ce76da25c4cd --- wp-comments-post.php | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/wp-comments-post.php b/wp-comments-post.php index f6a224761..5c4fc2410 100644 --- a/wp-comments-post.php +++ b/wp-comments-post.php @@ -35,8 +35,15 @@ $comment = trim($_POST['comment']); $comment_post_ID = intval($_POST['comment_post_ID']); $user_ip = $_SERVER['REMOTE_ADDR']; -if ( 'closed' == $wpdb->get_var("SELECT comment_status FROM $wpdb->posts WHERE ID = '$comment_post_ID'") ) +$post_status = $wpdb->get_var("SELECT comment_status FROM $wpdb->posts WHERE ID = '$comment_post_ID'"); + +if ( empty($post_status) ) { + // Post does not exist. Someone is trolling. Die silently. + // (Perhaps offer pluggable rebukes? Long delays, etc.) + die(); +} else if ( 'closed' == $post_status ) { die( __('Sorry, comments are closed for this item.') ); +} if ( get_settings('require_name_email') && ('' == $email || '' == $author) ) die( __('Error: please fill the required fields (name, email).') );