Changeset 12735 for trunk/src/bp-templates/bp-nouveau/includes/template-tags.php

Timestamp:

09/25/2020 07:15:20 PM (4 years ago)

Author:

imath

Message:

Templates: avoid duplicate IDs into comment form nonce field

We now include the Activity ID to the id attribute of the input tag generated for the nonce field used into the Activity comment form. This makes sure to avoid duplicate IDs when multiple activities are displayed on the activity pages.

Props dcavins

Fixes #8004

File:

• trunk/src/bp-templates/bp-nouveau/includes/template-tags.php (modified) (2 diffs)

trunk/src/bp-templates/bp-nouveau/includes/template-tags.php

@@ -2586 +2586 @@
  * @param string $action The action to get the submit button for. Required.
  */
-function bp_nouveau_submit_button( $action ) {
+function bp_nouveau_submit_button( $action, $object_id = 0 ) {
     $submit_data = bp_nouveau_get_submit_button( $action );
     if ( empty( $submit_data['attributes'] ) || empty( $submit_data['nonce'] ) ) {
@@ -2620 +2620 @@
         wp_nonce_field( $submit_data['nonce'] );
     } else {
+        if ( $object_id ) {
+            $submit_data['nonce_key'] .= '_' . (int) $object_id;
+        }
+
         wp_nonce_field( $submit_data['nonce'], $submit_data['nonce_key'] );
     }