Changeset 7458

Timestamp:

09/09/2026 03:49:53 AM (12 days ago)

Author:

johnjamesjacoby

Message:

Replies: Prevent replies to unreadable topics.

Backport the relevant parent-topic capability check from [7350] so Participants cannot submit replies to topics they cannot read. Add regression coverage for private topics.

Props hoangkien1020.
See #3650.

Location:

branches/2.6

Files:

• src/includes/replies/functions.php (modified) (1 diff)
• tests/phpunit/testcases/replies/functions/permissions.php (added)

branches/2.6/src/includes/replies/functions.php

@@ -202 +202 @@
         }
 
+        // User cannot read parent topic ID
+        if ( ! current_user_can( 'read_topic', $topic_id ) ) {
+                bbp_add_error( 'bbp_new_reply_topic_public', __( '<strong>Error</strong>: You do not have the capability to read or create new replies in this topic.', 'bbpress' ) );
+        }
+
         /** Forum ID **************************************************************/