Changeset 15983


Ignore:
Timestamp:
06/24/12 03:24:55 (7 years ago)
Author:
mistic100
Message:

bug 2660: check guest IP on insert_user_comment (same system as rate_picture)

Location:
trunk
Files:
1 added
2 edited

Legend:

Unmodified
Added
Removed
  • trunk/include/functions_comment.inc.php

    r13800 r15983  
    127127    $_POST['cr'][] = 'key'; // rvelices: I use this outside to see how spam robots work 
    128128  } 
     129   
     130  // anonymous id = ip address 
     131  $ip_components = explode('.', $comm['ip']); 
     132  if (count($ip_components) > 3) 
     133  { 
     134    array_pop($ip_components); 
     135  } 
     136  $comm['anonymous_id'] = implode('.', $ip_components); 
    129137 
    130138  if ($comment_action!='reject' and $conf['anti-flood_time']>0 and !is_admin()) 
     
    136144  WHERE date > '.$reference_date.' 
    137145    AND author_id = '.$comm['author_id']; 
     146    if (!is_classic_user()) 
     147    { 
     148      $query.= ' 
     149      AND anonymous_id = "'.$comm['anonymous_id'].'"'; 
     150    } 
     151    $query.= ' 
     152;'; 
     153 
    138154    list($counter) = pwg_db_fetch_row(pwg_query($query)); 
    139155    if ( $counter > 0 ) 
     
    153169    $query = ' 
    154170INSERT INTO '.COMMENTS_TABLE.' 
    155   (author, author_id, content, date, validated, validation_date, image_id) 
     171  (author, author_id, anonymous_id, content, date, validated, validation_date, image_id) 
    156172  VALUES ( 
    157173    \''.$comm['author'].'\', 
    158174    '.$comm['author_id'].', 
     175    \''.$comm['anonymous_id'].'\', 
    159176    \''.$comm['content'].'\', 
    160177    NOW(), 
  • trunk/install/piwigo_structure-mysql.sql

    r15652 r15983  
    5353  `author` varchar(255) default NULL, 
    5454  `author_id` smallint(5) DEFAULT NULL, 
     55  `anonymous_id` varchar(45) NOT NULL, 
    5556  `content` longtext, 
    5657  `validated` enum('true','false') NOT NULL default 'false', 
Note: See TracChangeset for help on using the changeset viewer.