Bug: user without rights for protected post can add comment to this post

[dimabuko]

Found 2 bugs.

1. We have a protected post. Post protected for payment membership (silver membership level).
There is a user with free membership (demo membership level).
If user open protected post (silver level) he didn’t see post, didn’t see content of comments, but see form to add comment. If he add comment — comment will be added and hided from user.
I think user shouldn’t see form to add comment in this case.

Screenshot 1 — https://www.dropbox.com/s/x9mten0h64y11fy/screencapture-lililove-me-small_confectionery-introduction-1459857197450.png?dl=0
Screenshot 2 — https://www.dropbox.com/s/s2a3c93k6k4q7z8/screencapture-lililove-me-small_confectionery-introduction-1459857288925.png?dl=0

2. With Custom messages addon.
We have a protected post. Post protected for payment membership (silver membership level).
There is a user with free membership (demo membership level).
Also we have Custom messages for all cases.
If user open protected post (silver level) he didn’t see post, didn’t see content of comments. Custom message in protected post works fine. But custom message in protected comment don’t work. Displays such custom message as we have for post.

Screenshot 1 — https://www.dropbox.com/s/s2a3c93k6k4q7z8/screencapture-lililove-me-small_confectionery-introduction-1459857288925.png?dl=0
Screenshot 2 — https://www.dropbox.com/s/kmuikq1a8jydvsa/Zrzut%20ekranu%202016-04-05%2014.56.45.png?dl=0

PS Also I think it can affect for a bug, that was a version ago with Protected more tag and comments area.

[mbrsolution]

Hi, this was fixed in version 3.2.0. See below.

1. Comment protection fix for posts using “more” tag.
2. Comments of protected posts are also protected.

Did you also protect your categories?

[dimabuko]

No. I didn’t protect categories and I haven’t any categories.
I think you talk about another fixed bug. I’ve got ver 3.2.0.

[mbrsolution]

In your theme, are you using a custom template for your post? Also can yo clarify the following comment.

and I haven’t any categories.

Are you telling me that in your blog or website you have no categories added?

[dimabuko]

1. There are no custom template for post. It’s standart page template. Nothing special.
2. Yes, I have no categories on my website.

[mbrsolution]

As far as I know when you create a new post in WordPress and you don’t select or create a category for the post, WordPress will assign the following Uncategorised. This is a standard procedure in WordPress. Can you confirm if this is your current setting?

[dimabuko]

It works as you described with Posts but not with Pages. I have no posts on website and I have only pages without any categories.

[mbrsolution]

Sorry for the confusion but I was under the impression that you were talking about posts and not pages as per your comments earlier. Also thread header title Bug: user without rights for protected post can add comment to this post

The plugin developers will investigate further your issue.

Thank you

[admin]

At the moment this is an intended behavior. WordPress has an option to enable comment posting for logged in users only. Our plugin will work with that option.

We will add a new option in our plugin also so comments can be posted by logged-in members only.

[dimabuko]

I don’t understand.

At the moment this is an intended behavior. WordPress has an option to enable comment posting for logged in users only. Our plugin will work with that option.

Ok, in my case this option is enabled and there is bug with protected page. User without rights to see page and comments (but registered user, with free subscription) can add comment to that page.

Also what about second bug I described? (Message added in custom messages add-on not showing in comments area)

[dimabuko]

So I’m not sure if you are going to fix bug that I described.

[dimabuko]

Hi again guys!

Now when my project is open for users this problem is looking crazy — link.

In comments field there are form-form-form! Please help with any advice.

[mbrsolution]

Hi, sorry but I can’t read the language displayed in the link you provided. Can you point to the area where you see form-form-form?

[dimabuko]

Excuse me, I made a screenshot with comments in red.

https://www.dropbox.com/s/8d1nqwsdaq9gxhg/screen.jpg?dl=0

[mbrsolution]

Okay I think I know what you mean. Are you saying that now you see too many comments forms displayed in the URL you shared above. Is this what you are talking about? Can you test one of WordPress default themes like Twenty Fifteen?

[Author]

Posts