Brians Threaded Comments plugin
Status: Testing
Version: 1.5.2
Right now it is throwing an error when it goes to save the comment - the comment is saved but is not nested and I receive an error . I hope to get this fixed right away. I got the errors to go away but it will not ‘thread’.
Brians Threaded Comments
plugin looks to be a fantastic additon to my WordPress Blog. It will allow people to comment on comments so that the comments show like forum threads instead of just by date.
Not only that you can click the little open/closed image in the upper left to colapse or expand the threads.
Mods:
Need to see if still need to apply Martin Geisler’s comment‘:
Please update the btc_alter_comment() function to properly escape the $_POST[’comment_reply_ID’] variable! As it is now, it is open to all sorts of nasty SQL-injection attacks…
Specifically, change the SQL statement so that is uses mysql_real_escape_string($_POST[’comment_reply_ID’]) instead of just a plain $_POST[’comment_reply_ID’], I believe that should have things secure again.







Navigation:
Comments »
No comments yet.
RSS feed for comments on this post. TrackBack URI
Leave a comment