malhuda/fictioneer
1
0
Fork 0
Code Issues 1 Pull Requests Actions Packages Projects Releases 112 Wiki Activity

Let AJAX comment form also receive nonce

Browse Source 
This should further prevent problems with some cache plugins.
This commit is contained in:
Tetrakern 2024-02-04 00:13:43 +01:00
parent 640e48016d
commit 3421ba5598
3 changed files with 10 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
includes/functions/comments/_comments_ajax.php
View File

@ -37,6 +37,8 @@ function fictioneer_ajax_get_comment_form() {
// Setup
$post_id = absint( $_GET['post_id'] );
$must_login = get_option( 'comment_registration' ) && ! is_user_logged_in();
$nonce = wp_create_nonce( 'fictioneer_nonce' );
$nonce_html = '<input id="fictioneer-ajax-nonce" name="fictioneer-ajax-nonce" type="hidden" value="' . $nonce . '">';
// Get buffered form
ob_start();
@ -50,7 +52,10 @@ function fictioneer_ajax_get_comment_form() {
// Get buffer
$output = ob_get_clean();
wp_send_json_success( array( 'html' => $output, 'postId' => $post_id, 'mustLogin' => $must_login ) );
// Send form
wp_send_json_success(
array( 'html' => $output, 'postId' => $post_id, 'mustLogin' => $must_login, 'nonceHtml' => $nonce_html )
);
}
if ( get_option( 'fictioneer_enable_ajax_comment_form' ) ) {

2
js/comments.min.js vendored
View File

File diff suppressed because one or more lines are too long

3
src/js/comments.js
View File

@ -953,6 +953,9 @@ function fcn_getCommentForm() {
fcn_bindAJAXCommentSubmit();
}
// AJAX nonce
fcn_addNonceHTML(response.data.nonceHtml);
// JS trap (if active)
fcn_addJSTrap();
} else {