Changeset 3286 for branches/plugin/bbp-admin/bbp-replies.php

Timestamp:

06/01/2011 01:37:23 AM (14 years ago)

Author:

johnjamesjacoby

Message:

Prevent poisoning of forum/topic/reply data when marking posts as trash/spam. Fixes issue where anonymous user data would get purged when post status was changed from an admin area post-row.

File:

• branches/plugin/bbp-admin/bbp-replies.php (modified) (2 diffs)

branches/plugin/bbp-admin/bbp-replies.php

@@ -227 +227 @@
             return $reply_id;
 
+        // Bail if not a post request
+        if ( 'POST' != strtoupper( $_SERVER['REQUEST_METHOD'] ) )
+            return $reply_id;
+
         // Current user cannot edit this reply
         if ( !current_user_can( 'edit_reply', $reply_id ) )
@@ -298 +302 @@
         // Bail if no post_id
         if ( empty( $post_id ) )
+            return $post_id;
+
+        // Bail if not a post request
+        if ( 'POST' != strtoupper( $_SERVER['REQUEST_METHOD'] ) )
             return $post_id;