This is a valid RSS feed.
This feed is valid, but interoperability with the widest range of feed readers could be improved by implementing the following recommendations.
</description>
<title>bbPress Trac</title>
^
<title></title>
^
</channel>
^
<?xml version="1.0"?>
<rss xmlns:dc="http://purl.org/dc/elements/1.1/" version="2.0">
<channel>
<title>bbPress Trac: Ticket #3434: Akismet catches spam for moderator, but moderators are able to bypass spam</title>
<link>https://bbpress.trac.wordpress.org/ticket/3434</link>
<description><p>
In the Akismet module, moderators are able to bypass Akismet checks:
<a class="ext-link" href="https://github.com/bbpress/bbPress/blob/09313c9984c55429f3e664ca4383768b68ee34b9/src/includes/extend/akismet.php#L205-L211"><span class="icon"></span>https://github.com/bbpress/bbPress/blob/09313c9984c55429f3e664ca4383768b68ee34b9/src/includes/extend/akismet.php#L205-L211</a>
</p>
<p>
However, if Akismet catches a post written by a moderator as spam, the following is listed in the "Akismet History" metabox with two entries:
</p>
<ul><li>Akismet caught this post as spam.
</li><li>Post status was changed to publish.
</li></ul><p>
See:
<a class="ext-link" href="https://github.com/bbpress/bbPress/blob/09313c9984c55429f3e664ca4383768b68ee34b9/src/includes/extend/akismet.php#L578-L599"><span class="icon"></span>https://github.com/bbpress/bbPress/blob/09313c9984c55429f3e664ca4383768b68ee34b9/src/includes/extend/akismet.php#L578-L599</a>
</p>
<p>
Perhaps changing the second log entry from "Post status was changed to publish" to "Akismet spam check overruled. Post status was published because user is a moderator" would be more clear and appropriate.
</p>
</description>
<language>en-us</language>
<image>
<title>bbPress Trac</title>
<url>https://bbpress.trac.wordpress.org/chrome/site/your_project_logo.png</url>
<link>https://bbpress.trac.wordpress.org/ticket/3434</link>
</image>
<generator>Trac 1.2.2</generator>
<item>
<dc:creator>r-a-y</dc:creator>
<pubDate>Wed, 28 Jul 2021 05:12:30 GMT</pubDate>
<title>component changed</title>
<link>https://bbpress.trac.wordpress.org/ticket/3434#comment:1</link>
<guid isPermaLink="false">https://bbpress.trac.wordpress.org/ticket/3434#comment:1</guid>
<description>
<ul>
<li><strong>component</strong>
changed from <em>General</em> to <em>Extend - Akismet</em>
</li>
</ul>
</description>
<category>Ticket</category>
</item><item>
<dc:creator>wpclungz1</dc:creator>
<pubDate>Fri, 01 Nov 2024 06:21:22 GMT</pubDate>
<title></title>
<link>https://bbpress.trac.wordpress.org/ticket/3434#comment:2</link>
<guid isPermaLink="false">https://bbpress.trac.wordpress.org/ticket/3434#comment:2</guid>
<description>
<p>
In the Akismet module, moderators are able to bypass Akismet checks:
</p>
<a href="https://www.aiaccount.com"></a> <a href="https://www.3ecpa.com.sg"></a> <a href="https://www.3ecpa.com.my "></a> <a href="https://www.aihrms.com "></a> <a href="https://a-nz1.shop"></a> <a href="https://a-nz2.shop"></a> <a href="https://a-nz3.shop"></a> <a href="https://a-nz4.shop"></a> <a href="https://a-nz5.shop"></a> <a href="https://a-nz6.shop"></a> <a href="https://a-nz7.shop"></a> <a href="https://a-nz8.shop"></a> <a href="https://a-nz9.shop"></a> <a href="https://a-nz10.shop"></a> <a href="https://a-nz11.shop"></a> <a href="https://a-nz12.shop"></a> <a href="https://a-nz13.shop"></a> <a href="https://a-nz14.shop"></a> <a href="https://a-nz15.shop"></a> <a href="https://a-nz16.shop"></a> <a href="https://a-nz17.shop"></a> <a href="https://a-nz18.shop"></a> <a href="https://a-nz19.shop"></a> <a href="https://a-nz20.shop"></a> <a href="https://a-nz21.shop"></a> <a href="https://a-nz22.shop"></a> <a href="https://a-nz23.shop"></a> <a href="https://a-nz24.shop"></a> <a href="https://a-nz25.shop"></a> <a href="https://a-nz26.shop"></a> <a href="https://a-nz27.shop"></a> <a href="https://a-nz28.shop"></a> <a href="https://a-nz29.shop"></a> <a href="https://a-nz30.shop"></a>
<p>
<a class="ext-link" href="https://github.com/bbpress/bbPress/blob/09313c9984c55429f3e664ca4383768b68ee34b9/src/includes/extend/akismet.php#L205-L211"><span class="icon"></span>https://github.com/bbpress/bbPress/blob/09313c9984c55429f3e664ca4383768b68ee34b9/src/includes/extend/akismet.php#L205-L211</a>
</p>
<p>
I got same issue ! Can anyone help me out ?
</p>
</description>
<category>Ticket</category>
</item><item>
<dc:creator>SirLouen</dc:creator>
<pubDate>Mon, 04 Nov 2024 17:02:34 GMT</pubDate>
<title>keywords, type, severity, priority changed; cc set</title>
<link>https://bbpress.trac.wordpress.org/ticket/3434#comment:3</link>
<guid isPermaLink="false">https://bbpress.trac.wordpress.org/ticket/3434#comment:3</guid>
<description>
<ul>
<li><strong>cc</strong>
<em>SirLouen</em> added
</li>
<li><strong>keywords</strong>
<em>2nd-opinion</em> added; <em>dev-feedback</em> removed
</li>
<li><strong>type</strong>
changed from <em>defect (bug)</em> to <em>enhancement</em>
</li>
<li><strong>severity</strong>
changed from <em>normal</em> to <em>minor</em>
</li>
<li><strong>priority</strong>
changed from <em>normal</em> to <em>low</em>
</li>
</ul>
<p>
I think that the post status log does the right thing, it informs of what's exactly happening: Akismet caught the spam and then, the post, automatically was set to publish because of the <code>moderate</code> permission
</p>
<p>
Replying to <a class="ticket" href="https://bbpress.trac.wordpress.org/ticket/3434#comment:2" title="Comment 2">wpclungz1</a>:
</p>
<blockquote class="citation">
<p>
I got same issue ! Can anyone help me out ?
</p>
</blockquote>
<p>
Still, anyone can easily extend the functionality of this using any of the hooks if needed, either if you want to inhibit that moderators are not bypassed by this module with the <code>bbp_bypass_spam_enforcement</code> filter hook.
</p>
<p>
After reviewing the akismet class code, personally I think that <code>BBP_Akismet::update_post_meta</code> is missing an action hook for adding functionality, like this issue suggests.
</p>
<p>
I'm submitting a patch with a possible solution also including the possibility to access the method <code>update_post_history</code> and being able to extend functionality and do things like proposed in this post, without having to do a bigger overhaul of the Akismet class.
</p>
<p>
For example, using my proposed hook, one could do what is mentioned in the OP:
</p>
<div class="wiki-code"><div class="code"><pre><span class="cp">&lt;?php</span>
<span class="k">function</span> <span class="nf">moderator_spam_notice</span> <span class="p">(</span> <span class="nv">$post_id</span> <span class="p">)</span> <span class="p">{</span>
<span class="k">if</span> <span class="p">(</span> <span class="nb">class_exists</span><span class="p">(</span> <span class="s1">'BBP_Akismet'</span> <span class="p">)</span> <span class="p">)</span> <span class="p">{</span>
<span class="k">if</span> <span class="p">(</span> <span class="nx">current_user_can</span><span class="p">(</span> <span class="s1">'moderate'</span><span class="p">,</span> <span class="nv">$post_id</span> <span class="p">)</span> <span class="p">)</span> <span class="p">{</span>
<span class="nv">$akismet</span> <span class="o">=</span> <span class="k">new</span> <span class="nx">BBP_Akismet</span><span class="p">();</span>
<span class="nv">$akismet</span><span class="o">-&gt;</span><span class="na">update_post_history</span> <span class="p">(</span>
<span class="nv">$post_id</span><span class="p">,</span>
<span class="nx">esc_html__</span><span class="p">(</span> <span class="s1">'Akismet spam check overruled. Post status was published because user is a moderator'</span> <span class="p">),</span>
<span class="s1">'moderator-bypass'</span><span class="p">,</span>
<span class="p">);</span>
<span class="p">}</span>
<span class="p">}</span>
<span class="p">}</span>
<span class="nx">add_action</span><span class="p">(</span> <span class="s1">'bbp_akismet_update_post_meta'</span><span class="p">,</span> <span class="s1">'moderator_spam_notice'</span><span class="p">,</span> <span class="mi">10</span><span class="p">,</span> <span class="mi">1</span> <span class="p">);</span>
</pre></div></div><p>
PS: I would also add <code>static</code> to <code>update_post_history</code> because its not a function that need object context to work but for the proposed patch I'm leaving as-is.
</p>
</description>
<category>Ticket</category>
</item><item>
<dc:creator>prbot</dc:creator>
<pubDate>Mon, 04 Nov 2024 17:03:46 GMT</pubDate>
<title>keywords changed</title>
<link>https://bbpress.trac.wordpress.org/ticket/3434#comment:4</link>
<guid isPermaLink="false">https://bbpress.trac.wordpress.org/ticket/3434#comment:4</guid>
<description>
<ul>
<li><strong>keywords</strong>
<em>has-patch</em> added
</li>
</ul>
<p>
<em>This ticket was mentioned in <a class="ext-link" href="https://github.com/bbpress/bbPress/pull/25"><span class="icon"></span>PR #25</a> on <a class="ext-link" href="https://github.com/bbpress/bbPress/"><span class="icon"></span>bbpress/bbPress</a> by <a class="ext-link" href="https://profiles.wordpress.org/sirlouen/"><span class="icon"></span>@SirLouen</a>.</em>
Trac Issue:
<a class="ext-link" href="https://bbpress.trac.wordpress.org/ticket/3434"><span class="icon"></span>https://bbpress.trac.wordpress.org/ticket/3434</a>
</p>
</description>
<category>Ticket</category>
</item>
</channel>
</rss>
If you would like to create a banner that links to this page (i.e. this validation result), do the following:
Download the "valid RSS" banner.
Upload the image to your own server. (This step is important. Please do not link directly to the image on this server.)
Add this HTML to your page (change the image src
attribute if necessary):
If you would like to create a text link instead, here is the URL you can use: