WordPress.org

Forums

Simple Comment Editing
Anyone can just edit the comment (9 posts)

  1. cloudduster
    Member
    Posted 1 year ago #

    While reading through the latest comment, I was surprised a bit to see that I can actually edit that comment without being logged in.

    Disabled the plugin temporarily until this gets sorted out.

    https://wordpress.org/plugins/simple-comment-editing/

  2. Ronald Huereca
    Member
    Plugin Author

    Posted 1 year ago #

    Thanks for bringing this to my attention. I'll do some testing and see if I can duplicate it.

  3. Ronald Huereca
    Member
    Plugin Author

    Posted 1 year ago #

    cloudduster,

    I've been testing the plugin for several days now. Logged in, not logged in. I've never been able to edit a comment that wasn't my own.

    Can you share how to duplicate this?

  4. cloudduster
    Member
    Posted 1 year ago #

    Okay will continue testing the plugin and will report back. One odd thing I saw was like 400+ minutes left to edit when it's usually 15 minutes?

  5. Ronald Huereca
    Member
    Plugin Author

    Posted 1 year ago #

    That's weird. Default is 5 minutes.

  6. cloudduster
    Member
    Posted 1 year ago #

    have you tried leaving comment as 'anonymous' cause i tried it just right now and it allowed anyone to edit. i posted the test comment in chrome, and viewed the comment url, in firefox

    or maybe because i've used the comment url directly?

    anyway, i think this is ok because no one would know the url anyway

  7. Ronald Huereca
    Member
    Plugin Author

    Posted 1 year ago #

    Maybe. Think we can do a skype session tomorrow so we can screenshare?

    My username is ronalfy or ronald huereca.

  8. cloudduster
    Member
    Posted 1 year ago #

    Added you on Skype.

    I'm not sure if it's my theme or a conflicting plugin, but I have this 'latest comments' widget, if you click on that, you'll be taken to the comment directly, and anyone who clicks on it can edit that comment.

  9. Ronald Huereca
    Member
    Plugin Author

    Posted 1 year ago #

    My apologies, but I got 4 skype requests and I'm not sure which one is you. Can you share the first part of your name so I can add you?

Topic Closed

This topic has been closed to new replies.

About this Plugin

About this Topic

Tags

No tags yet.