[代码技巧] 为子比主题评论区增加私密评论可见功能

// 私密评论显示逻辑

function zib_private_message_hook($comment_content, $comment) {

    $comment_ID = $comment->comment_ID;

    $is_private = get_comment_meta($comment_ID, '_private', true);

    $email = $comment->comment_author_email;

    $current_user = wp_get_current_user();

    

    // HTML for private comment notification

    $html = '<div class="hidden-box" reply-show="true" reload-hash="#hidden-box-comment"><a class="hidden-text"><i class="fa fa-exclamation-circle mr10"></i>此评论为私密评论，仅双方可见.</a></div>';



    if ($is_private) {

        // 安全判断：优先使用 user_id 比对

        $is_comment_author = false;

        $is_post_author = false;

        $is_admin = current_user_can('manage_options');



        if ($current_user && $current_user->ID) {

            $is_comment_author = ($current_user->ID == $comment->user_id);

            $is_post_author = ($current_user->ID == get_post_field('post_author', $comment->comment_post_ID));

        }



        // 仅允许：管理员 / 评论作者 / 文章作者 查看私密评论内容

        if ($is_admin || $is_comment_author || $is_post_author) {

            return '<div class="hidden-box show" id="hidden-box-comment"><div class="hidden-text">私密评论内容</div>' . $comment_content . '</div>';

        }



        return $html;

    }



    return $comment_content;

}

add_filter('get_comment_text', 'zib_private_message_hook', 10, 2);



// 添加私密按钮到评论操作列表

function zib_comments_action_add_private($lists, $comment) {

    $current_user = wp_get_current_user();

    $user_id = get_current_user_id();



    // 仅允许管理员或评论作者看到“设为私密”选项

    if (is_user_logged_in() && (is_super_admin($user_id) || $current_user->ID == $comment->user_id)) {



        $comment_ID = $comment->comment_ID;

        $is_private = get_comment_meta($comment_ID, '_private', true);

        $private_text = empty($is_private) ? '设为私密' : '取消私密';

        $action = empty($is_private) ? 'set_private' : 'del_private';

        $private_but = '<a class="comment-private-link wp-ajax-submit" form-action="' . esc_attr($action) . '" form-data="' . esc_attr(json_encode(['id' => $comment_ID])) . '" href="javascript:;"><i class="fa fa-user-secret mr10" aria-hidden="true"></i>' . $private_text . '</a>';



        $lists = '<li>' . $private_but . '</li>' . $lists;

    }



    return $lists;

}

add_filter('comments_action_lists', 'zib_comments_action_add_private', 99, 2);



// 处理更新评论私密状态的 AJAX 请求

function zib_private_comment_action() {

    $response = ['reload' => true];



    if (!isset($_POST['action']) || !$_POST['action']) {

        zib_send_json_error(['msg' => '无效的操作类型'] + $response);

    }



    if (!isset($_POST['id']) || !$_POST['id']) {

        zib_send_json_error(['msg' => '无效的评论ID'] + $response);

    }



    $comment_id = intval($_POST['id']);

    $action = sanitize_text_field($_POST['action']);

    $comment = get_comment($comment_id);

    $post_author_id = get_post_field('post_author', $comment->comment_post_ID);



    $current_user = wp_get_current_user();



    // 用 user_id 判断评论作者

    if (!$comment_id || !$current_user || !($current_user->ID == $comment->user_id || current_user_can('manage_options'))) {

        zib_send_json_error(['msg' => '权限不足或无效的评论ID'] + $response);

    }



    if ($action === 'set_private') {

        update_comment_meta($comment_id, '_private', 'true');

        zib_send_json_success(['msg' => '评论已设为私密'] + $response);

    } elseif ($action === 'del_private') {

        delete_comment_meta($comment_id, '_private');

        zib_send_json_success(['msg' => '评论已公开'] + $response);

    } else {

        zib_send_json_error(['msg' => '无效的操作类型'] + $response);

    }

}

add_action('wp_ajax_set_private', 'zib_private_comment_action');

add_action('wp_ajax_del_private', 'zib_private_comment_action');