WordPress

mirror of https://github.com/WordPress/WordPress.git synced 2025-02-22 22:45:39 +00:00

History

Rachel Baker 0fdb955ce8 REST API: On Comment create, limit the ability to set the author_ip value directly.

Users without the moderate_comments capability can no longer set the `author_ip` property directly, and instead receive a `WP_Error` if they attempt to do so. Otherwise, the `author_ip property` is populated from `$_SERVER['REMOTE_ADDR']` if present and a valid IP value. Finally, fallback to 127.0.0.1 as a last resort.

Props dd32, rachelbaker, joehoyle.
Fixes #38819.
Built from https://develop.svn.wordpress.org/trunk@39302


git-svn-id: http://core.svn.wordpress.org/trunk@39242 1a063a9b-81f0-0310-95a4-ce76da25c4cd

2016-11-18 21:13:32 +00:00

class-wp-rest-attachments-controller.php

REST API: Uppercase 'ID' in endpoint descriptions and error messages for consistency with other strings.

2016-11-16 12:18:33 +00:00

class-wp-rest-comments-controller.php

REST API: On Comment create, limit the ability to set the author_ip value directly.

2016-11-18 21:13:32 +00:00

class-wp-rest-controller.php

REST API: Remove rest_get_post filter and get_post abstraction.

2016-11-08 13:09:33 +00:00

class-wp-rest-post-statuses-controller.php

REST API: Unify permission error messages.