comment.php 4.5 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103
  1. <?php
  2. if ( 'POST' != $_SERVER['REQUEST_METHOD'] ) {
  3. header('Allow: POST');
  4. header('HTTP/1.1 405 Method Not Allowed');
  5. header('Content-Type: text/plain');
  6. exit;
  7. }
  8. require( dirname(__FILE__) . '/../../../../wp-load.php' ); // 此 comments-ajax.php 位於主題資料夾,所以位置已不同
  9. nocache_headers();
  10. $comment_post_ID = isset($_POST['comment_post_ID']) ? (int) $_POST['comment_post_ID'] : 0;
  11. $post = get_post($comment_post_ID);
  12. if ( empty($post->comment_status) ) {
  13. do_action('comment_id_not_found', $comment_post_ID);
  14. err(__('Invalid comment status.')); // 將 exit 改為錯誤提示
  15. }
  16. $status = get_post_status($post);
  17. $status_obj = get_post_status_object($status);
  18. do_action('pre_comment_on_post', $comment_post_ID);
  19. $comment_author = ( isset($_POST['author']) ) ? trim(strip_tags($_POST['author'])) : null;
  20. $comment_author_email = ( isset($_POST['email']) ) ? trim($_POST['email']) : null;
  21. $comment_author_url = ( isset($_POST['url']) ) ? trim($_POST['url']) : null;
  22. $comment_content = ( isset($_POST['comment']) ) ? trim($_POST['comment']) : null;
  23. $edit_id = ( isset($_POST['edit_id']) ) ? $_POST['edit_id'] : null; // 提取 edit_id
  24. // If the user is logged in
  25. $user = wp_get_current_user();
  26. if ( $user->ID ) {
  27. if ( empty( $user->display_name ) )
  28. $user->display_name=$user->user_login;
  29. $comment_author = $wpdb->escape($user->display_name);
  30. $comment_author_email = $wpdb->escape($user->user_email);
  31. $comment_author_url = $wpdb->escape($user->user_url);
  32. if ( current_user_can('unfiltered_html') ) {
  33. if ( wp_create_nonce('unfiltered-html-comment_' . $comment_post_ID) != $_POST['_wp_unfiltered_html_comment'] ) {
  34. kses_remove_filters(); // start with a clean slate
  35. kses_init_filters(); // set up the filters
  36. }
  37. }
  38. } else {
  39. if ( get_option('comment_registration') || 'private' == $status )
  40. err('Hi,你必须登录才能发表评论!'); // 將 wp_die 改為錯誤提示
  41. }
  42. $comment_type = '';
  43. if ( get_option('require_name_email') && !$user->ID ) {
  44. if ( 6 > strlen($comment_author_email) || '' == $comment_author )
  45. err( '请填写昵称和邮箱!' ); // 將 wp_die 改為錯誤提示
  46. elseif ( !is_email($comment_author_email))
  47. err( '请填写有效的邮箱地址!' ); // 將 wp_die 改為錯誤提示
  48. }
  49. if ( '' == $comment_content )
  50. err( '请填写点评论!' ); // 將 wp_die 改為錯誤提示
  51. // 增加: 錯誤提示功能
  52. function err($ErrMsg) {
  53. header('HTTP/1.1 405 Method Not Allowed');
  54. echo $ErrMsg;
  55. exit;
  56. }
  57. $comment_parent = isset($_POST['comment_parent']) ? absint($_POST['comment_parent']) : 0;
  58. $commentdata = compact('comment_post_ID', 'comment_author', 'comment_author_email', 'comment_author_url', 'comment_content', 'comment_type', 'comment_parent', 'user_ID');
  59. // 增加: 檢查評論是否正被編輯, 更新或新建評論
  60. if ( $edit_id ){
  61. $comment_id = $commentdata['comment_ID'] = $edit_id;
  62. wp_update_comment( $commentdata );
  63. } else {
  64. $comment_id = wp_new_comment( $commentdata );
  65. }
  66. $comment = get_comment($comment_id);
  67. if ( !$user->ID ) {
  68. $comment_cookie_lifetime = apply_filters('comment_cookie_lifetime', 30000000);
  69. setcookie('comment_author_' . COOKIEHASH, $comment->comment_author, time() + $comment_cookie_lifetime, COOKIEPATH, COOKIE_DOMAIN);
  70. setcookie('comment_author_email_' . COOKIEHASH, $comment->comment_author_email, time() + $comment_cookie_lifetime, COOKIEPATH, COOKIE_DOMAIN);
  71. setcookie('comment_author_url_' . COOKIEHASH, esc_url($comment->comment_author_url), time() + $comment_cookie_lifetime, COOKIEPATH, COOKIE_DOMAIN);
  72. }
  73. $comment_depth = 1; //为评论的 class 属性准备的
  74. $tmp_c = $comment;
  75. while($tmp_c->comment_parent != 0){
  76. $comment_depth++;
  77. $tmp_c = get_comment($tmp_c->comment_parent);
  78. }
  79. //以下是評論式樣, 不含 "回覆". 要用你模板的式樣 copy 覆蓋.
  80. echo '<li '; comment_class(); echo ' id="comment-'.get_comment_ID().'">';
  81. //头像
  82. echo '<div class="c-avatar">';
  83. echo get_avatar( $comment->comment_author_email, $size = '54' , deel_avatar_default() );
  84. //内容
  85. echo '<div class="c-main" id="div-comment-'.get_comment_ID().'">';
  86. echo comment_text();
  87. if ($comment->comment_approved == '0'){
  88. echo '<span class="c-approved">您的评论正在排队审核中,请稍后!</span><br />';
  89. }
  90. //信息
  91. echo '<div class="c-meta">';
  92. echo '<span class="c-author">'.get_comment_author_link().'</span>'; echo get_comment_time('m-d H:i '); echo time_ago();
  93. echo '</div>';
  94. echo '</div></div>';
  95. ?>