fix: add checks for empty IP on comment request and empty name/email …

…if that is required, refs #500
pluginkollektiv · Jun 2, 2023 · 8349b24 · 8349b24
1 parent 2492bea
commit 8349b24
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/src/Handlers/Comment.php b/src/Handlers/Comment.php
@@ -42,6 +42,14 @@ public static function process( $comment ) {
 			return self::handle_spam( $comment, [ 'asb-empty' ] );
 		}
 
+		if ( empty( $comment['comment_author_IP'] ) ) {
+			return self::handle_spam( $comment, [ 'asb-empty' ] );
+		}
+
+		if ( get_option( 'require_name_email' ) && ( empty( $comment['comment_author_email'] ) || empty( $comment['comment_author'] ) ) ) {
+			return self::handle_spam( $comment, [ 'asb-empty' ] );
+		}
+
 		// phpcs:disable WordPress.Security.NonceVerification.Missing
 		// Everybody can post.
 		if ( strpos( $request_path, 'wp-comments-post.php' ) === false || empty( $_POST ) ) {