Twitter Button from twitbuttons.com
June 23, 2005

Brians Threaded Comments plugin

Status: Testing
Version: 1.5.2

Right now it is throwing an error when it goes to save the comment - the comment is saved but is not nested and I receive an error . I hope to get this fixed right away. I got the errors to go away but it will not ‘thread’.

Brians Threaded Comments plugin looks to be a fantastic additon to my WordPress Blog. It will allow people to comment on comments so that the comments show like forum threads instead of just by date. Not only that you can click the little open/closed image in the upper left to colapse or expand the threads.

Mods:

Need to see if still need to apply Martin Geisler’s comment‘:

Please update the btc_alter_comment() function to properly escape the $_POST[’comment_reply_ID’] variable! As it is now, it is open to all sorts of nasty SQL-injection attacks…

Specifically, change the SQL statement so that is uses mysql_real_escape_string($_POST[’comment_reply_ID’]) instead of just a plain $_POST[’comment_reply_ID’], I believe that should have things secure again.

Navigation:

Comments »

No comments yet.

RSS feed for comments on this post. TrackBack URI

Leave a comment



Powered by WordPress
Copyright by Gary Paulson

Bad Behavior has blocked 1031 access attempts in the last 7 days.