PluginProbe
ActivityPub / 5.3.1
ActivityPub v5.3.1
9.3.1 9.3.0 9.2.2 9.2.1 9.2.0 9.1.0 9.0.2 9.0.1 9.0.0 8.3.0 8.2.1 8.2.0 8.1.1 1.0.5 1.0.6 1.0.7 1.0.8 1.0.9 1.1.0 1.2.0 1.3.0 2.0.0 2.0.1 2.1.0 2.1.1 All 160 releases
← All changes | includes/class-comment.php +153 -393 8.2.15.3.1 View file →
@@ -7,9 +7,9 @@
7 7
8 8 namespace Activitypub;
9 9
10 10 use Activitypub\Collection\Actors;
11 -use Activitypub\Collection\Remote_Posts;
11 +use WP_Comment_Query;
12 12
13 13 /**
14 14 * ActivityPub Comment Class.
15 15 *
@@ -22,82 +22,23 @@
22 22 */
23 23 public static function init() {
24 24 self::register_comment_types();
25 25
26 - \add_filter( 'map_meta_cap', array( self::class, 'map_meta_cap' ), 10, 4 );
27 26 \add_filter( 'comment_reply_link', array( self::class, 'comment_reply_link' ), 10, 3 );
28 27 \add_filter( 'comment_class', array( self::class, 'comment_class' ), 10, 3 );
29 - \add_filter( 'comment_feed_where', array( static::class, 'comment_feed_where' ) );
30 - \add_filter( 'get_comment_link', array( self::class, 'remote_comment_link' ), 11, 2 );
28 + \add_filter( 'get_comment_link', array( self::class, 'remote_comment_link' ), 11, 3 );
29 + \add_action( 'wp_enqueue_scripts', array( self::class, 'enqueue_scripts' ) );
31 30 \add_action( 'pre_get_comments', array( static::class, 'comment_query' ) );
32 - \add_filter( 'pre_comment_approved', array( static::class, 'pre_comment_approved' ), 11, 2 );
31 + \add_filter( 'pre_comment_approved', array( static::class, 'pre_comment_approved' ), 10, 2 );
33 32 \add_filter( 'get_avatar_comment_types', array( static::class, 'get_avatar_comment_types' ), 99 );
34 - \add_action( 'update_option_activitypub_allow_likes', array( self::class, 'maybe_update_comment_counts' ), 10, 2 );
35 - \add_action( 'update_option_activitypub_allow_reposts', array( self::class, 'maybe_update_comment_counts' ), 10, 2 );
36 - \add_filter( 'pre_wp_update_comment_count_now', array( static::class, 'pre_wp_update_comment_count_now' ), 5, 3 );
37 - \add_filter( 'get_comment_author', array( static::class, 'render_emoji' ), 10, 2 );
38 - \add_filter( 'comment_author', array( static::class, 'unescape_emoji' ), 20 ); // After esc_html().
39 - \add_filter( 'rest_comment_query', array( static::class, 'rest_comment_query' ) );
40 - \add_filter( 'comment_text', array( static::class, 'render_blocks' ), 5 ); // Before other filters.
33 + \add_filter( 'pre_wp_update_comment_count_now', array( static::class, 'pre_wp_update_comment_count_now' ), 10, 3 );
41 34 }
42 35
43 36 /**
44 - * Render blocks in comment content.
45 - *
46 - * Comments don't automatically parse blocks like posts do.
47 - * This filter applies do_blocks() to render activitypub/emoji
48 - * and activitypub/image blocks in comment content.
49 - *
50 - * @param string $content The comment content.
51 - *
52 - * @return string The content with blocks rendered.
53 - */
54 - public static function render_blocks( $content ) {
55 - if ( empty( $content ) || ! \str_contains( $content, '<!-- wp:activitypub/' ) ) {
56 - return $content;
57 - }
58 -
59 - $blocks = \parse_blocks( $content );
60 - $output = '';
61 -
62 - foreach ( $blocks as $block ) {
63 - if ( ! empty( $block['blockName'] ) && \str_starts_with( $block['blockName'], 'activitypub/' ) ) {
64 - $output .= \render_block( $block );
65 - } else {
66 - $output .= \serialize_block( $block );
67 - }
68 - }
69 -
70 - return $output;
71 - }
72 -
73 - /**
74 - * Remove edit capabilities for comments received via ActivityPub.
75 - *
76 - * @param array $caps Array of capabilities.
77 - * @param string $cap Capability name.
78 - * @param int $user_id User ID.
79 - * @param array $args Array of arguments.
80 - *
81 - * @return array Modified array of capabilities.
82 - */
83 - public static function map_meta_cap( $caps, $cap, $user_id, $args ) {
84 - if ( 'edit_comment' === $cap && self::was_received( $args[0] ) ) {
85 - if ( ! \is_admin() || ( isset( $GLOBALS['current_screen'] ) && 'comment' === $GLOBALS['current_screen']->id ) ) {
86 - $caps[] = 'do_not_allow';
87 - }
88 - }
89 -
90 - return $caps;
91 - }
92 -
93 - /**
94 37 * Filter the comment reply link.
95 38 *
96 - * Handles three cases for replies to fediverse comments:
97 - * 1. User can federate → show normal reply link
98 - * 2. User is logged in but can't federate → show warning (no reply link)
99 - * 3. User is not logged in → show remote reply block
39 + * We don't want to show the comment reply link for federated comments
40 + * if the user is disabled for federation.
100 41 *
101 42 * @param string $link The HTML markup for the comment reply link.
102 43 * @param array $args An array of arguments overriding the defaults.
103 44 * @param \WP_Comment $comment The object of the comment being replied.
@@ -105,65 +46,59 @@
105 46 * @return string The filtered HTML markup for the comment reply link.
106 47 */
107 48 public static function comment_reply_link( $link, $args, $comment ) {
108 49 if ( self::are_comments_allowed( $comment ) ) {
109 - return $link;
110 - }
111 -
112 - // Logged-in user without ActivityPub capability - show warning instead of reply link.
113 - if ( \is_user_logged_in() ) {
114 - $author = \esc_html( $comment->comment_author );
115 -
116 - $message = sprintf(
117 - /* translators: %s: comment author name */
118 - \__( '%s is on the Fediverse. To reply to them, ask your administrator to enable ActivityPub for your account.', 'activitypub' ),
119 - $author
120 - );
121 -
122 - // Add link to users page if current user can edit users.
123 - if ( \current_user_can( 'edit_users' ) ) {
124 - $message = sprintf(
125 - /* translators: 1: comment author name, 2: URL to the users management page */
126 - \__( '%1$s is on the Fediverse. To reply to them, <a href="%2$s">enable ActivityPub for your account</a>.', 'activitypub' ),
127 - $author,
128 - \esc_url( \admin_url( 'users.php' ) )
129 - );
50 + $user_id = get_current_user_id();
51 + if ( $user_id && self::was_received( $comment ) && \user_can( $user_id, 'activitypub' ) ) {
52 + return self::create_fediverse_reply_link( $link, $args );
130 53 }
131 54
132 - $warning = sprintf(
133 - '<p class="activitypub-reply-warning"><em>%s</em></p>',
134 - \wp_kses( $message, array( 'a' => array( 'href' => array() ) ) )
135 - );
136 -
137 - /**
138 - * Filters the warning message shown to logged-in users without ActivityPub capability.
139 - *
140 - * @param string $warning The warning HTML markup.
141 - * @param \WP_Comment $comment The comment being replied to.
142 - */
143 - return \apply_filters( 'activitypub_federation_warning', $warning, $comment );
55 + return $link;
144 56 }
145 57
146 - if ( ! \WP_Block_Type_Registry::get_instance()->is_registered( 'activitypub/remote-reply' ) ) {
147 - \register_block_type_from_metadata( ACTIVITYPUB_PLUGIN_DIR . 'build/remote-reply' );
148 - }
149 -
150 - $attributes = array(
58 + $attrs = array(
151 59 'selectedComment' => self::generate_id( $comment ),
152 60 'commentId' => $comment->comment_ID,
153 61 );
154 62
155 - $block = \do_blocks( \sprintf( '<!-- wp:activitypub/remote-reply %s /-->', \wp_json_encode( $attributes ) ) );
63 + $div = sprintf(
64 + '<div class="activitypub-remote-reply" data-attrs="%s"></div>',
65 + esc_attr( wp_json_encode( $attrs ) )
66 + );
156 67
157 68 /**
158 69 * Filters the HTML markup for the ActivityPub remote comment reply container.
159 70 *
160 - * @param string $block The HTML markup for the remote reply container.
71 + * @param string $div The HTML markup for the remote reply container. Default is a div
72 + * with class 'activitypub-remote-reply' and data attributes for
73 + * the selected comment ID and internal comment ID.
161 74 */
162 - return \apply_filters( 'activitypub_comment_reply_link', $block );
75 + return apply_filters( 'activitypub_comment_reply_link', $div );
163 76 }
164 77
165 78 /**
79 + * Create a link to reply to a federated comment.
80 + *
81 + * This function adds a title attribute to the reply link to inform the user
82 + * that the comment was received from the fediverse and the reply will be sent
83 + * to the original author.
84 + *
85 + * @param string $link The HTML markup for the comment reply link.
86 + * @param array $args The args provided by the `comment_reply_link` filter.
87 + *
88 + * @return string The modified HTML markup for the comment reply link.
89 + */
90 + private static function create_fediverse_reply_link( $link, $args ) {
91 + $str_to_replace = sprintf( '>%s<', $args['reply_text'] );
92 + $replace_with = sprintf(
93 + ' title="%s">%s<',
94 + esc_attr__( 'This comment was received from the fediverse and your reply will be sent to the original author', 'activitypub' ),
95 + esc_html__( 'Reply with federation', 'activitypub' )
96 + );
97 + return str_replace( $str_to_replace, $replace_with, $link );
98 + }
99 +
100 + /**
166 101 * Check if it is allowed to comment to a comment.
167 102 *
168 103 * Checks if the comment is local only or if the user can comment federated comments.
169 104 *
@@ -183,15 +118,20 @@
183 118 if ( ! $current_user ) {
184 119 return false;
185 120 }
186 121
187 - if ( is_single_user() && \user_can( $current_user, 'activitypub' ) ) {
188 - // On a single user site, comments by users with the `activitypub` capability will be federated as the blog user.
122 + if ( is_single_user() && \user_can( $current_user, 'publish_posts' ) ) {
123 + // On a single user site, comments by users with the `publish_posts` capability will be federated as the blog user.
189 124 $current_user = Actors::BLOG_USER_ID;
190 125 }
191 126
192 - // User is not allowed to federate comments.
193 - return user_can_activitypub( $current_user );
127 + $is_user_disabled = is_user_disabled( $current_user );
128 +
129 + if ( $is_user_disabled ) {
130 + return false;
131 + }
132 +
133 + return true;
194 134 }
195 135
196 136 /**
197 137 * Check if a comment is federated.
@@ -289,14 +229,16 @@
289 229 return false;
290 230 }
291 231
292 232 if ( is_single_user() && \user_can( $user_id, 'activitypub' ) ) {
293 - // On a single user site, comments by users with the `activitypub` capability will be federated as the blog user.
233 + // On a single user site, comments by users with the `publish_posts` capability will be federated as the blog user.
294 234 $user_id = Actors::BLOG_USER_ID;
295 235 }
296 236
297 - // User is not allowed to federate comments.
298 - if ( ! user_can_activitypub( $user_id ) ) {
237 + $is_user_disabled = is_user_disabled( $user_id );
238 +
239 + // User is disabled for federation.
240 + if ( $is_user_disabled ) {
299 241 return false;
300 242 }
301 243
302 244 // It is a comment to the post and can be federated.
@@ -317,9 +259,9 @@
317 259 *
318 260 * @return \WP_Comment|false Comment object, or false on failure.
319 261 */
320 262 public static function object_id_to_comment( $id ) {
321 - $comment_query = new \WP_Comment_Query(
263 + $comment_query = new WP_Comment_Query(
322 264 array(
323 265 'meta_key' => 'source_id', // phpcs:ignore WordPress.DB.SlowDBQuery.slow_db_query_meta_key
324 266 'meta_value' => $id, // phpcs:ignore WordPress.DB.SlowDBQuery.slow_db_query_meta_value
325 267 'orderby' => 'comment_date',
@@ -342,18 +284,18 @@
342 284 *
343 285 * @return string|null Comment ID or null if not found.
344 286 */
345 287 public static function url_to_commentid( $url ) {
346 - if ( ! $url || ! \filter_var( $url, \FILTER_VALIDATE_URL ) ) {
288 + if ( ! $url || ! filter_var( $url, \FILTER_VALIDATE_URL ) ) {
347 289 return null;
348 290 }
349 291
350 292 // Check for local comment.
351 - if ( is_same_domain( $url ) ) {
293 + if ( \wp_parse_url( \home_url(), \PHP_URL_HOST ) === \wp_parse_url( $url, \PHP_URL_HOST ) ) {
352 294 $query = \wp_parse_url( $url, \PHP_URL_QUERY );
353 295
354 296 if ( $query ) {
355 - \parse_str( $query, $params );
297 + parse_str( $query, $params );
356 298
357 299 if ( ! empty( $params['c'] ) ) {
358 300 $comment = \get_comment( $params['c'] );
359 301
@@ -378,9 +320,9 @@
378 320 ),
379 321 ),
380 322 );
381 323
382 - $query = new \WP_Comment_Query();
324 + $query = new WP_Comment_Query();
383 325 $comments = $query->query( $args );
384 326
385 327 if ( $comments && is_array( $comments ) ) {
386 328 return $comments[0]->comment_ID;
@@ -407,40 +349,8 @@
407 349 return $classes;
408 350 }
409 351
410 352 /**
411 - * Makes the comment feed filterable by comment type.
412 - *
413 - * Also excludes ActivityPub comment types from the feed when no type is specified.
414 - *
415 - * @param string $where The `WHERE` clause for the comment feed query.
416 - *
417 - * @return string The modified `WHERE` clause.
418 - */
419 - public static function comment_feed_where( $where ) {
420 - global $wpdb;
421 -
422 - $comment_type = \get_query_var( 'type' );
423 -
424 - if ( 'all' === $comment_type ) {
425 - return $where;
426 - }
427 -
428 - $comment_types = self::get_comment_type_slugs();
429 -
430 - if ( \in_array( $comment_type, $comment_types, true ) ) {
431 - $where .= $wpdb->prepare( ' AND comment_type = %s', $comment_type );
432 - } else {
433 - $comment_types = \array_map( 'esc_sql', $comment_types );
434 - $placeholders = implode( ', ', array_fill( 0, count( $comment_types ), '%s' ) );
435 - // phpcs:ignore WordPress.DB.PreparedSQLPlaceholders.ReplacementsWrongNumber, WordPress.DB.PreparedSQL.NotPrepared
436 - $where .= $wpdb->prepare( sprintf( ' AND comment_type NOT IN (%s)', $placeholders ), ...$comment_types );
437 - }
438 -
439 - return $where;
440 - }
441 -
442 - /**
443 353 * Gets the public comment id via the WordPress comments meta.
444 354 *
445 355 * @param int $wp_comment_id The internal WordPress comment ID.
446 356 * @param bool $fallback Whether the code should fall back to `source_url` if `source_id` is not set.
@@ -487,18 +397,15 @@
487 397 *
488 398 * @return string $url
489 399 */
490 400 public static function remote_comment_link( $comment_link, $comment ) {
491 - if ( ! $comment || \is_admin() || \is_search() ) {
401 + if ( ! $comment || is_admin() ) {
492 402 return $comment_link;
493 403 }
494 404
495 - $remote_comment_link = null;
496 - if ( 'comment' === $comment->comment_type ) {
497 - $remote_comment_link = self::get_source_url( $comment->comment_ID );
498 - }
405 + $public_comment_link = self::get_source_url( $comment->comment_ID );
499 406
500 - return $remote_comment_link ?? $comment_link;
407 + return $public_comment_link ?? $comment_link;
501 408 }
502 409
503 410
504 411 /**
@@ -518,9 +425,9 @@
518 425 return $public_comment_link;
519 426 }
520 427
521 428 // Generate URI based on comment ID.
522 - return \add_query_arg( 'c', $comment->comment_ID, \home_url( '/' ) );
429 + return \add_query_arg( 'c', $comment->comment_ID, \trailingslashit( \home_url() ) );
523 430 }
524 431
525 432 /**
526 433 * Check if a post has remote comments
@@ -552,8 +459,61 @@
552 459 return ! empty( $comments );
553 460 }
554 461
555 462 /**
463 + * Enqueue scripts for remote comments
464 + */
465 + public static function enqueue_scripts() {
466 + if ( ! \is_singular() || \is_user_logged_in() ) {
467 + // Only on single pages, only for logged-out users.
468 + return;
469 + }
470 +
471 + if ( ! \post_type_supports( \get_post_type(), 'activitypub' ) ) {
472 + // Post type does not support ActivityPub.
473 + return;
474 + }
475 +
476 + if ( ! \comments_open() || ! \get_comments_number() ) {
477 + // No comments, no need to load the script.
478 + return;
479 + }
480 +
481 + if ( ! self::post_has_remote_comments( \get_the_ID() ) ) {
482 + // No remote comments, no need to load the script.
483 + return;
484 + }
485 +
486 + $handle = 'activitypub-remote-reply';
487 + $data = array(
488 + 'namespace' => ACTIVITYPUB_REST_NAMESPACE,
489 + 'defaultAvatarUrl' => ACTIVITYPUB_PLUGIN_URL . 'assets/img/mp.jpg',
490 + );
491 + $js = sprintf( 'var _activityPubOptions = %s;', wp_json_encode( $data ) );
492 + $asset_file = ACTIVITYPUB_PLUGIN_DIR . 'build/remote-reply/index.asset.php';
493 +
494 + if ( \file_exists( $asset_file ) ) {
495 + $assets = require_once $asset_file;
496 +
497 + \wp_enqueue_script(
498 + $handle,
499 + \plugins_url( 'build/remote-reply/index.js', __DIR__ ),
500 + $assets['dependencies'],
501 + $assets['version'],
502 + true
503 + );
504 + \wp_add_inline_script( $handle, $js, 'before' );
505 +
506 + \wp_enqueue_style(
507 + $handle,
508 + \plugins_url( 'build/remote-reply/style-index.css', __DIR__ ),
509 + array( 'wp-components' ),
510 + $assets['version']
511 + );
512 + }
513 + }
514 +
515 + /**
556 516 * Get the comment type by activity type.
557 517 *
558 518 * @param string $activity_type The activity type.
559 519 *
@@ -580,9 +540,9 @@
580 540 */
581 541 public static function get_comment_types() {
582 542 global $activitypub_comment_types;
583 543
584 - return (array) $activitypub_comment_types;
544 + return $activitypub_comment_types;
585 545 }
586 546
587 547 /**
588 548 * Is this a registered comment type.
@@ -605,15 +565,22 @@
605 565 *
606 566 * @return array The registered custom comment type slugs.
607 567 */
608 568 public static function get_comment_type_slugs() {
609 - if ( ! did_action( 'init' ) ) {
610 - _doing_it_wrong( __METHOD__, 'This function should not be called before the init action has run. Comment types are only available after init.', '7.5.0' );
569 + return array_keys( self::get_comment_types() );
570 + }
611 571
612 - return array();
613 - }
572 + /**
573 + * Return the registered custom comment type slugs.
574 + *
575 + * @deprecated 4.5.0 Use get_comment_type_slugs instead.
576 + *
577 + * @return array The registered custom comment type slugs.
578 + */
579 + public static function get_comment_type_names() {
580 + _deprecated_function( __METHOD__, '4.5.0', 'get_comment_type_slugs' );
614 581
615 - return array_keys( self::get_comment_types() );
582 + return self::get_comment_type_slugs();
616 583 }
617 584
618 585 /**
619 586 * Get the custom comment type.
@@ -681,9 +648,9 @@
681 648 'repost',
682 649 array(
683 650 'label' => __( 'Reposts', 'activitypub' ),
684 651 'singular' => __( 'Repost', 'activitypub' ),
685 - 'description' => 'A repost (or Announce) is when a post appears in the timeline because someone else shared it, while still showing the original author as the source.',
652 + 'description' => __( 'A repost on the indieweb is a post that is purely a 100% re-publication of another (typically someone else\'s) post.', 'activitypub' ),
686 653 'icon' => '♻️',
687 654 'class' => 'p-repost',
688 655 'type' => 'repost',
689 656 'collection' => 'reposts',
@@ -700,9 +667,9 @@
700 667 'like',
701 668 array(
702 669 'label' => __( 'Likes', 'activitypub' ),
703 670 'singular' => __( 'Like', 'activitypub' ),
704 - 'description' => 'A like is a small positive reaction that shows appreciation for a post without sharing it further.',
671 + 'description' => __( 'A like is a popular webaction button and in some cases post type on various silos such as Facebook and Instagram.', 'activitypub' ),
705 672 'icon' => '👍',
706 673 'class' => 'p-like',
707 674 'type' => 'like',
708 675 'collection' => 'likes',
@@ -713,27 +680,8 @@
713 680 /* translators: %d: Number of likes */
714 681 'count_plural' => _x( '%d likes', 'number of likes', 'activitypub' ),
715 682 )
716 683 );
717 -
718 - register_comment_type(
719 - 'quote',
720 - array(
721 - 'label' => __( 'Quotes', 'activitypub' ),
722 - 'singular' => __( 'Quote', 'activitypub' ),
723 - 'description' => 'A quote is when a post is shared along with an added comment, so the original post appears together with the sharer&#8217;s own words.',
724 - 'icon' => '❞',
725 - 'class' => 'p-quote',
726 - 'type' => 'quote',
727 - 'collection' => 'quotes',
728 - 'activity_types' => array( 'quote' ),
729 - 'excerpt' => html_entity_decode( \__( '&hellip; quoted this!', 'activitypub' ) ),
730 - /* translators: %d: Number of quotes */
731 - 'count_single' => _x( '%d quote', 'number of quotes', 'activitypub' ),
732 - /* translators: %d: Number of quotes */
733 - 'count_plural' => _x( '%d quotes', 'number of quotes', 'activitypub' ),
734 - )
735 - );
736 684 }
737 685
738 686 /**
739 687 * Show avatars on Activities if set.
@@ -755,12 +703,12 @@
755 703 * @author Jan Boddez
756 704 *
757 705 * @see https://github.com/janboddez/indieblocks/blob/a2d59de358031056a649ee47a1332ce9e39d4ce2/includes/functions.php#L423-L432
758 706 *
759 - * @param \WP_Comment_Query $query Comment count.
707 + * @param WP_Comment_Query $query Comment count.
760 708 */
761 709 public static function comment_query( $query ) {
762 - if ( ! $query instanceof \WP_Comment_Query ) {
710 + if ( ! $query instanceof WP_Comment_Query ) {
763 711 return;
764 712 }
765 713
766 714 // Do not exclude likes and reposts on ActivityPub requests.
@@ -767,119 +715,47 @@
767 715 if ( defined( 'ACTIVITYPUB_REQUEST' ) && ACTIVITYPUB_REQUEST ) {
768 716 return;
769 717 }
770 718
771 - // Do not exclude likes and reposts on REST requests (handled by rest_comment_query).
772 - if ( \wp_is_serving_rest_request() ) {
719 + // Do not exclude likes and reposts on REST requests.
720 + if ( defined( 'REST_REQUEST' ) && REST_REQUEST ) {
773 721 return;
774 722 }
775 723
776 - // Filter post types for admin requests.
777 - if ( \is_admin() ) {
778 - $query->query_vars['post_type'] = self::get_allowed_comment_post_types();
724 + // Do not exclude likes and reposts on admin pages or on non-singular pages.
725 + if ( is_admin() || ! is_singular() ) {
779 726 return;
780 727 }
781 728
782 - // Do not exclude likes and reposts on non-singular pages.
783 - if ( ! \is_singular() ) {
784 - return;
785 - }
786 -
787 - // Do not exclude likes and reposts if the query is for specific types.
729 + // Do not exclude likes and reposts if the query is for comments.
788 730 if ( ! empty( $query->query_vars['type__in'] ) || ! empty( $query->query_vars['type'] ) ) {
789 731 return;
790 732 }
791 733
792 - // Do not exclude likes and reposts if the query is already excluding other comment types.
793 - if ( ! empty( $query->query_vars['type__not_in'] ) ) {
794 - return;
795 - }
796 -
797 734 // Exclude likes and reposts by the ActivityPub plugin.
798 735 $query->query_vars['type__not_in'] = self::get_comment_type_slugs();
799 736 }
800 737
801 738 /**
802 - * Filters comments in REST API requests.
803 - *
804 - * Excludes comments on ActivityPub post types and ActivityPub comment
805 - * types (likes, reposts) from the REST API.
806 - *
807 - * @param array $prepared_args Array of arguments for WP_Comment_Query.
808 - *
809 - * @return array Modified array of arguments.
810 - */
811 - public static function rest_comment_query( $prepared_args ) {
812 - // Exclude comments on ActivityPub post types.
813 - $prepared_args['post_type'] = self::get_allowed_comment_post_types();
814 -
815 - // Exclude ActivityPub comment types (likes, reposts) unless explicitly requested.
816 - if ( empty( $prepared_args['type'] ) && empty( $prepared_args['type__in'] ) ) {
817 - $prepared_args['type__not_in'] = self::get_comment_type_slugs();
818 - }
819 -
820 - return $prepared_args;
821 - }
822 -
823 - /**
824 - * Returns post types that should show comments (excluding hidden post types).
825 - *
826 - * @return array Array of post type names.
827 - */
828 - private static function get_allowed_comment_post_types() {
829 - $hide_for = self::hide_for();
830 -
831 - if ( empty( $hide_for ) ) {
832 - return \get_post_types_by_support( 'comments' );
833 - }
834 -
835 - return \array_diff( \get_post_types_by_support( 'comments' ), $hide_for );
836 - }
837 -
838 - /**
839 739 * Filter the comment status before it is set.
840 740 *
841 - * @param int|string|\WP_Error $approved The approved comment status.
842 - * @param array $comment_data The comment data.
741 + * @param string $approved The approved comment status.
742 + * @param array $commentdata The comment data.
843 743 *
844 - * @return int|string|\WP_Error The approval status. 1, 0, 'spam', 'trash', or WP_Error.
744 + * @return boolean `true` if the comment is approved, `false` otherwise.
845 745 */
846 - public static function pre_comment_approved( $approved, $comment_data ) {
847 - /*
848 - * Only return early for already-approved comments, trash, or errors.
849 - * Don't short-circuit on 'spam' - we may want to override Akismet.
850 - * Respect 'trash' since it comes from the WordPress disallowed list.
851 - */
852 - if ( 1 === $approved || '1' === $approved || 'trash' === $approved || \is_wp_error( $approved ) ) {
746 + public static function pre_comment_approved( $approved, $commentdata ) {
747 + if ( $approved || \is_wp_error( $approved ) ) {
853 748 return $approved;
854 749 }
855 750
856 - // Maybe auto-approve likes and reposts.
857 - if (
858 - \in_array( $comment_data['comment_type'], self::get_comment_type_slugs(), true ) &&
859 - '1' === \get_option( 'activitypub_auto_approve_reactions' )
860 - ) {
861 - return 1;
862 - }
863 -
864 - /*
865 - * Always auto-approve comments on remote posts (ap_post) since
866 - * they are not visible in the WP admin comment moderation screen.
867 - */
868 - $post_id = $comment_data['comment_post_ID'];
869 - $post = \get_post( $post_id );
870 -
871 - if ( $post && \in_array( $post->post_type, self::hide_for(), true ) ) {
872 - return 1;
873 - }
874 -
875 751 if ( '1' !== \get_option( 'comment_previously_approved' ) ) {
876 752 return $approved;
877 753 }
878 754
879 755 if (
880 - empty( $comment_data['comment_meta']['protocol'] ) ||
881 - 'activitypub' !== $comment_data['comment_meta']['protocol']
756 + empty( $commentdata['comment_meta']['protocol'] ) ||
757 + 'activitypub' !== $commentdata['comment_meta']['protocol']
882 758 ) {
883 759 return $approved;
884 760 }
885 761
@@ -884,10 +760,10 @@
884 760 }
885 761
886 762 global $wpdb;
887 763
888 - $author = $comment_data['comment_author'];
889 - $author_url = $comment_data['comment_author_url'];
764 + $author = $commentdata['comment_author'];
765 + $author_url = $commentdata['comment_author_url'];
890 766 // phpcs:ignore
891 767 $ok_to_comment = $wpdb->get_var( $wpdb->prepare( "SELECT comment_approved FROM $wpdb->comments WHERE comment_author = %s AND comment_author_url = %s and comment_approved = '1' LIMIT 1", $author, $author_url ) );
892 768
893 769 if ( 1 === (int) $ok_to_comment ) {
@@ -897,22 +773,8 @@
897 773 return $approved;
898 774 }
899 775
900 776 /**
901 - * Update comment counts when interaction settings are disabled.
902 - *
903 - * Triggers a recount when likes or reposts are disabled to ensure accurate comment counts.
904 - *
905 - * @param mixed $old_value The old option value.
906 - * @param mixed $value The new option value.
907 - */
908 - public static function maybe_update_comment_counts( $old_value, $value ) {
909 - if ( '1' === $old_value && '1' !== $value ) {
910 - Migration::update_comment_counts();
911 - }
912 - }
913 -
914 - /**
915 777 * Filters the comment count to exclude ActivityPub comment types.
916 778 *
917 779 * @param int|null $new_count The new comment count. Default null.
918 780 * @param int $old_count The old comment count.
@@ -921,118 +783,16 @@
921 783 * @return int|null The updated comment count, or null to use the default query.
922 784 */
923 785 public static function pre_wp_update_comment_count_now( $new_count, $old_count, $post_id ) {
924 786 if ( null === $new_count ) {
925 - $excluded_types = array_filter( self::get_comment_type_slugs(), array( self::class, 'is_comment_type_enabled' ) );
787 + global $wpdb;
926 788
927 - if ( ! empty( $excluded_types ) ) {
928 - /*
929 - * Include 'note' type when Gutenberg's filter is registered, so a
930 - * single query excludes both ActivityPub and Gutenberg types.
931 - */
932 - if ( \has_filter( 'pre_wp_update_comment_count_now', 'gutenberg_exclude_notes_from_comment_count' ) ) {
933 - $excluded_types[] = 'note';
934 - }
789 + $excluded_types = self::get_comment_type_slugs();
935 790
936 - /**
937 - * Filters the comment types excluded from the comment count.
938 - *
939 - * Runs at priority 5 on `pre_wp_update_comment_count_now` so that
940 - * a single query can exclude types from multiple plugins. Other
941 - * plugins can hook here to add their own comment types.
942 - *
943 - * @since 8.0.0
944 - *
945 - * @param string[] $excluded_types The comment type slugs to exclude.
946 - * @param int $post_id The post ID.
947 - */
948 - $excluded_types = \apply_filters( 'activitypub_excluded_comment_types', $excluded_types, $post_id );
949 - $excluded_types = array_unique( array_filter( $excluded_types ) );
791 + // phpcs:ignore WordPress.DB
792 + $new_count = (int) $wpdb->get_var( $wpdb->prepare( "SELECT COUNT(*) FROM $wpdb->comments WHERE comment_post_ID = %d AND comment_approved = '1' AND comment_type NOT IN ('" . implode( "','", $excluded_types ) . "')", $post_id ) );
950 793
951 - global $wpdb;
952 -
953 - // phpcs:ignore WordPress.DB
954 - $new_count = (int) $wpdb->get_var( $wpdb->prepare( "SELECT COUNT(*) FROM $wpdb->comments WHERE comment_post_ID = %d AND comment_approved = '1' AND comment_type NOT IN ('" . implode( "','", $excluded_types ) . "')", $post_id ) );
955 - }
956 794 }
957 795
958 796 return $new_count;
959 - }
960 -
961 - /**
962 - * Check if a comment type is enabled.
963 - *
964 - * @param string $comment_type The comment type.
965 - * @return bool True if the comment type is enabled.
966 - */
967 - public static function is_comment_type_enabled( $comment_type ) {
968 - return '1' === get_option( "activitypub_allow_{$comment_type}s", '1' );
969 - }
970 -
971 - /**
972 - * Get post types to hide comments for in admin.
973 - *
974 - * These are non-public post types whose comments should not appear
975 - * in the main comments list in the WordPress admin.
976 - *
977 - * @return string[] Array of post type names to hide comments for.
978 - */
979 - public static function hide_for() {
980 - $post_types = array( Remote_Posts::POST_TYPE );
981 -
982 - /**
983 - * Filters the list of post types to hide comments for.
984 - *
985 - * @param string[] $post_types Array of post type names to hide comments for.
986 - */
987 - return \apply_filters( 'activitypub_hide_comments_for', $post_types );
988 - }
989 -
990 - /**
991 - * Render emoji in comment author name.
992 - *
993 - * Replaces emoji shortcodes with img tags on the get_comment_author filter.
994 - * Emoji data is retrieved from the linked remote actor.
995 - *
996 - * @param string $author The comment author name.
997 - * @param string $comment_id The comment ID as a numeric string.
998 - *
999 - * @return string The comment author name with rendered emoji.
1000 - */
1001 - public static function render_emoji( $author, $comment_id ) {
1002 - $remote_actor_id = \get_comment_meta( $comment_id, '_activitypub_remote_actor_id', true );
1003 -
1004 - if ( empty( $remote_actor_id ) ) {
1005 - return $author;
1006 - }
1007 -
1008 - $emoji_data = \get_post_meta( $remote_actor_id, '_activitypub_emoji', true );
1009 -
1010 - if ( empty( $emoji_data ) ) {
1011 - return $author;
1012 - }
1013 -
1014 - return Emoji::replace_from_json( $author, $emoji_data );
1015 - }
1016 -
1017 - /**
1018 - * Selectively unescape emoji images in comment author.
1019 - *
1020 - * This runs at priority 20 after WordPress's esc_html() filter on comment_author.
1021 - *
1022 - * @param string $author The comment author name (already escaped by WordPress).
1023 - *
1024 - * @return string The comment author name with emoji images unescaped.
1025 - */
1026 - public static function unescape_emoji( $author ) {
1027 - // Only attempt to unescape if there are emoji images present in the escaped string.
1028 - if ( false === \strpos( $author, 'class=&quot;emoji&quot;' ) ) {
1029 - return $author;
1030 - }
1031 -
1032 - // Decode entities so we can selectively restore emoji <img> tags.
1033 - $decoded = \html_entity_decode( $author, ENT_QUOTES | ENT_HTML5, 'UTF-8' );
1034 -
1035 - // Use strict KSES validation to only allow valid emoji img tags.
1036 - return \wp_kses( $decoded, Emoji::get_kses_allowed_html() );
1037 797 }
1038 798 }