Changeset 12371 for trunk/src/bp-activity/actions/reply.php

Timestamp:

04/25/2019 02:24:26 PM (7 years ago)

Author:

boonebgorges

Message:

Activity: Improved capability checks when processing reply POSTs.

File:

• trunk/src/bp-activity/actions/reply.php (modified) (1 diff)

trunk/src/bp-activity/actions/reply.php

@@ -45 +45 @@
     }
 
+    $activity_item = new BP_Activity_Activity( $activity_id );
+    if ( ! bp_activity_user_can_read( $activity_item ) ) {
+        bp_core_add_message( __( 'There was an error posting that reply. Please try again.', 'buddypress' ), 'error' );
+        bp_core_redirect( wp_get_referer() . '#ac-form-' . $activity_id );
+    }
+
     $comment_id = bp_activity_new_comment( array(
         'content'     => $content,