Draft posts shown to non–logged in users

ericr23
(@ericr23)

11 years, 4 months ago

When Search Everything includes draft posts, they show up in the results whether or not the user is logged in. To prevent this, I’ve had to add a conditional statement just inside The Loop:

if ((get_post_status()=='publish') || ((get_post_status()!='publish') && current_user_can('edit_posts')) || !is_search())

Can a modification to achieve this be made to the Search Everything plugin instead?

https://wordpress.org/plugins/search-everything/

Viewing 4 replies - 1 through 4 (of 4 total)

Thread Starter

ericr23

(@ericr23)

11 years, 4 months ago

Perhaps a “current_user_can(‘edit_posts’) condition could be inserted into the se_search_draft_posts() function?

Thread Starter

ericr23

(@ericr23)

11 years, 4 months ago

That worked!

I changed:

//search drafts
	function se_search_draft_posts( $where ) {
		global $wpdb;
		if ( !empty( $this->query_instance->query_vars['s'] ) ) {
			$where = str_replace( '"', '\'', $where );
			if ( !$this->wp_ver28 ) {
				$where = str_replace( " AND (post_status = 'publish'", " AND ((post_status = 'publish' OR post_status = 'draft')", $where );
			}
			else {
				$where = str_replace( " AND ($wpdb->posts.post_status = 'publish'", " AND ($wpdb->posts.post_status = 'publish' OR $wpdb->posts.post_status = 'draft'", $where );
			}
			$where = str_replace( " AND (post_status = 'publish'", " AND (post_status = 'publish' OR post_status = 'draft'", $where );
		}
		$this->se_log( "drafts where: ".$where );
		return $where;
	}

to:

//search drafts
	function se_search_draft_posts( $where ) {
		global $wpdb;
		if ( !empty( $this->query_instance->query_vars['s'] ) ) {
			$where = str_replace( '"', '\'', $where );
			if (current_user_can('edit_posts')):
			if ( !$this->wp_ver28 ) {
				$where = str_replace( " AND (post_status = 'publish'", " AND ((post_status = 'publish' OR post_status = 'draft')", $where );
			}
			else {
				$where = str_replace( " AND ($wpdb->posts.post_status = 'publish'", " AND ($wpdb->posts.post_status = 'publish' OR $wpdb->posts.post_status = 'draft'", $where );
			}
			$where = str_replace( " AND (post_status = 'publish'", " AND (post_status = 'publish' OR post_status = 'draft'", $where );
			endif; //end of added condition
		}
		$this->se_log( "drafts where: ".$where );
		return $where;
	}