From 54e3eef69c3f26dd3c982572b5c3e1568209fcf0 Mon Sep 17 00:00:00 2001 From: Shish Date: Sat, 24 Jan 2009 00:15:33 -0800 Subject: [PATCH] don't try to post a comment without input --- ext/comment/main.php | 18 ++++++++++-------- 1 file changed, 10 insertions(+), 8 deletions(-) diff --git a/ext/comment/main.php b/ext/comment/main.php index 258e293a..a8b62cef 100644 --- a/ext/comment/main.php +++ b/ext/comment/main.php @@ -74,14 +74,16 @@ class CommentList implements Extension { if(($event instanceof PageRequestEvent) && $event->page_matches("comment")) { if($event->get_arg(0) == "add") { - try { - $cpe = new CommentPostingEvent($_POST['image_id'], $event->user, $_POST['comment']); - send_event($cpe); - $event->page->set_mode("redirect"); - $event->page->set_redirect(make_link("post/view/".int_escape($_POST['image_id']))); - } - catch(CommentPostingException $ex) { - $this->theme->display_error($event->page, "Comment Blocked", $ex->getMessage()); + if(isset($_POST['image_id']) && isset($_POST['comment'])) { + try { + $cpe = new CommentPostingEvent($_POST['image_id'], $event->user, $_POST['comment']); + send_event($cpe); + $event->page->set_mode("redirect"); + $event->page->set_redirect(make_link("post/view/".int_escape($_POST['image_id']))); + } + catch(CommentPostingException $ex) { + $this->theme->display_error($event->page, "Comment Blocked", $ex->getMessage()); + } } } else if($event->get_arg(0) == "delete") {