-require_once('admin.php');
-
-$title = __('Edit Comments');
-$parent_file = 'edit-comments.php';
-wp_enqueue_script( 'admin-comments' );
-wp_enqueue_script('admin-forms');
-
-if ( !empty( $_REQUEST['delete_comments'] ) ) {
- check_admin_referer('bulk-comments');
-
- $comments_deleted = $comments_approved = $comments_unapproved = $comments_spammed = 0;
- foreach ($_REQUEST['delete_comments'] as $comment) : // Check the permissions on each
- $comment = (int) $comment;
- $post_id = (int) $wpdb->get_var( $wpdb->prepare( "SELECT comment_post_ID FROM $wpdb->comments WHERE comment_ID = %d", $comment) );
- if ( !current_user_can('edit_post', $post_id) )
- continue;
- if ( !empty( $_REQUEST['spamit'] ) ) {
- wp_set_comment_status($comment, 'spam');
- $comments_spammed++;
- } elseif ( !empty( $_REQUEST['deleteit'] ) ) {
- wp_set_comment_status($comment, 'delete');
- $comments_deleted++;
- } elseif ( !empty( $_REQUEST['approveit'] ) ) {
- wp_set_comment_status($comment, 'approve');
- $comments_approved++;
- } elseif ( !empty( $_REQUEST['unapproveit'] ) ) {
- wp_set_comment_status($comment, 'hold');
- $comments_unapproved++;
- }
- endforeach;
- $redirect_to = basename( __FILE__ ) . '?deleted=' . $comments_deleted . '&approved=' . $comments_approved . '&spam=' . $comments_spammed . '&unapproved=' . $comments_unapproved;
- if ( isset($_REQUEST['apage']) )
- $redirect_to = add_query_arg( 'apage', absint($_REQUEST['apage']), $redirect_to );
- if ( !empty($_REQUEST['mode']) )
- $redirect_to = add_query_arg('mode', $_REQUEST['mode'], $redirect_to);
- if ( !empty($_REQUEST['comment_status']) )
- $redirect_to = add_query_arg('comment_status', $_REQUEST['comment_status'], $redirect_to);
- if ( !empty($_REQUEST['s']) )
- $redirect_to = add_query_arg('s', $_REQUEST['s'], $redirect_to);
- wp_redirect( $redirect_to );
-} elseif ( !empty($_GET['_wp_http_referer']) ) {
- wp_redirect(remove_query_arg(array('_wp_http_referer', '_wpnonce'), stripslashes($_SERVER['REQUEST_URI'])));
- exit;
+/**
+ * Edit Comments Administration Screen.
+ *
+ * @package WordPress
+ * @subpackage Administration
+ */
+
+/** WordPress Administration Bootstrap */
+require_once( dirname( __FILE__ ) . '/admin.php' );
+if ( ! current_user_can( 'edit_posts' ) ) {
+ wp_die(
+ '<h1>' . __( 'Cheatin’ uh?' ) . '</h1>' .
+ '<p>' . __( 'You are not allowed to edit comments.' ) . '</p>',
+ 403
+ );