WordPress.org

Ready to get started?Download WordPress

Forums

WP 2.8.2 bug? (9 posts)

  1. UseShots
    Member
    Posted 4 years ago #

    This must be a bug introduced in WP 2.8.2 that attempts to fix the XSS vulnerability in comment author's URLs.

    When I click "edit" on comments with existing comment author's URL, the "Edit Comment" form comes up with an empty "website" field. And when I save the modification, the site URL is no longer there.

  2. esmi
    Forum Moderator
    Posted 4 years ago #

    Have you tried:

    - deactivating all plugins to see if this resolves the problem. If this works, re-activate the plugins one by one until you find the problematic plugin(s).

    - switching to the default theme to rule out any theme-related problems.

  3. UseShots
    Member
    Posted 4 years ago #

    It's not plugins. It's the WP admin itself. It's the admins "Edit Comments" form that loses the URL of the commenter.

    Anyway, I tried to disable all plugins and it wouldn't help.

  4. UseShots
    Member
    Posted 4 years ago #

    It's indeed a bug.

    I checked the change in the source files and found the bug in /wp-admin/edit-form-comment.php file.

    In the previous version they had a variable $url

    $url = get_comment_author_url();

    But in WP 2.8.2, they removed that line but still use the (now undefined) $url variable as a value of the "URL" edit box:

    <td><input type="text" id="newcomment_author_url" name="newcomment_author_url" size="30" class="code" value="<?php echo esc_attr($url); ?>" tabindex="3" /></td>

    Not sure how to submit it to WordPress developers. I checked the latest SVN version and the bug is still there.

  5. mrmist
    Forum Janitor
    Posted 4 years ago #

  6. UseShots
    Member
    Posted 4 years ago #

    Thanks. Looks like the bug fix will be available in 2.8.3

  7. ttk_2k
    Member
    Posted 4 years ago #

    I too have just noticed this problem. I tried on other blogs I have, and believe it's a bug. Thanks.

  8. mattjabs
    Member
    Posted 4 years ago #

    I cannot edit comments at all after upgrading to 2.8.2.

    I deactivated all plugins, switched to the default theme, and I am still unable to edit comments.

    As an aside, I am also unable to add tags to posts. I can add them, but when I do "update post" or "publish", they disappear again and are not added after all.

    Any advice on how I can remedy these?

  9. mattjabs
    Member
    Posted 4 years ago #

    Nevermind.

    I used the solution given on this forum post: http://wordpress.org/support/topic/275443?replies=9

    It worked.

Topic Closed

This topic has been closed to new replies.

About this Topic

Tags