wpseek.com
A WordPress-centric search engine for devs and theme authors

function edit_comment() {
	if ( ! current_user_can( 'edit_comment', (int) $_POST['comment_ID'] ) ) {
		wp_die( __( 'Sorry, you are not allowed to edit comments on this post.' ) );
	}

	if ( isset( $_POST['newcomment_author'] ) ) {
		$_POST['comment_author'] = $_POST['newcomment_author'];
	}
	if ( isset( $_POST['newcomment_author_email'] ) ) {
		$_POST['comment_author_email'] = $_POST['newcomment_author_email'];
	}
	if ( isset( $_POST['newcomment_author_url'] ) ) {
		$_POST['comment_author_url'] = $_POST['newcomment_author_url'];
	}
	if ( isset( $_POST['comment_status'] ) ) {
		$_POST['comment_approved'] = $_POST['comment_status'];
	}
	if ( isset( $_POST['content'] ) ) {
		$_POST['comment_content'] = $_POST['content'];
	}
	if ( isset( $_POST['comment_ID'] ) ) {
		$_POST['comment_ID'] = (int) $_POST['comment_ID'];
	}

	if ( isset( $_POST['comment_parent'] ) ) {
		$comment_id     = (int) $_POST['comment_ID'];
		$comment_parent = (int) $_POST['comment_parent'];

		$_POST['comment_parent'] = $comment_parent;

		$comment = get_comment( $comment_id );

		if ( $comment && $comment_parent && $comment_parent !== (int) $comment->comment_parent ) {
			if ( ! get_option( 'thread_comments' ) ) {
				return new WP_Error( 'comment_parent_invalid', __( 'The comment parent cannot be changed because threaded comments are disabled.' ) );
			}

			if ( $comment_parent === $comment_id ) {
				return new WP_Error( 'comment_parent_invalid', __( 'A comment cannot be a reply to itself.' ) );
			}

			$parent = get_comment( $comment_parent );

			// The parent must be a comment of the same type, on the same post, and not in the Trash or marked as spam.
			if (
				! $parent
				|| (int) $parent->comment_post_ID !== (int) $comment->comment_post_ID
				|| $parent->comment_type !== $comment->comment_type
				|| in_array( wp_get_comment_status( $parent ), array( 'spam', 'trash' ), true )
			) {
				return new WP_Error( 'comment_parent_invalid', __( 'Invalid parent comment.' ) );
			}

			// Walk up the new parent's ancestors to prevent creating a threading loop.
			$ancestors    = array();
			$ancestor     = $parent;
			$parent_depth = 1;

			while ( $ancestor && $ancestor->comment_parent && ! isset( $ancestors[ $ancestor->comment_ID ] ) ) {
				if ( (int) $ancestor->comment_parent === $comment_id ) {
					return new WP_Error( 'comment_parent_invalid', __( 'A comment cannot be a reply to one of its own replies.' ) );
				}

				$ancestors[ $ancestor->comment_ID ] = true;
				++$parent_depth;

				$ancestor = get_comment( $ancestor->comment_parent );
			}

			$max_thread_depth = (int) get_option( 'thread_comments_depth' );

			if ( $max_thread_depth ) {
				/*
				 * The comment's replies move with it, so the whole subtree must stay within
				 * the maximum depth. Measure its height one level of replies at a time,
				 * stopping as soon as the subtree cannot fit, which also bounds the loop
				 * should the stored comment hierarchy contain a cycle.
				 */
				$subtree_height = 1;
				$level_ids      = array( $comment_id );

				while ( $level_ids && $parent_depth + $subtree_height <= $max_thread_depth ) {
					$level_ids = get_comments(
						array(
							'parent__in' => $level_ids,
							'fields'     => 'ids',
							'status'     => 'any',
							'orderby'    => 'none',
						)
					);

					if ( $level_ids ) {
						++$subtree_height;
					}
				}

				if ( $parent_depth + $subtree_height > $max_thread_depth ) {
					return new WP_Error( 'comment_parent_invalid', __( 'The comment cannot be moved there because it or its replies would exceed the maximum threading depth.' ) );
				}
			}
		}
	}

	foreach ( array( 'aa', 'mm', 'jj', 'hh', 'mn' ) as $timeunit ) {
		if ( ! empty( $_POST[ 'hidden_' . $timeunit ] ) && $_POST[ 'hidden_' . $timeunit ] !== $_POST[ $timeunit ] ) {
			$_POST['edit_date'] = '1';
			break;
		}
	}

	if ( ! empty( $_POST['edit_date'] ) ) {
		$aa = $_POST['aa'];
		$mm = $_POST['mm'];
		$jj = $_POST['jj'];
		$hh = $_POST['hh'];
		$mn = $_POST['mn'];
		$ss = $_POST['ss'];
		$jj = ( $jj > 31 ) ? 31 : $jj;
		$hh = ( $hh > 23 ) ? $hh - 24 : $hh;
		$mn = ( $mn > 59 ) ? $mn - 60 : $mn;
		$ss = ( $ss > 59 ) ? $ss - 60 : $ss;

		$_POST['comment_date'] = "$aa-$mm-$jj $hh:$mn:$ss";
	}

	return wp_update_comment( $_POST, true );
}