wp_allow_comment( array $commentdata, bool $wp_error = false ): int|string|WP_Error

Compatibility

Present in every tracked release (6.7.7 to 7.1.0), and compiles on PHP 7.4 through 8.6-dev.

Parameters

$commentdataarray

Contains information on the comment.

$wp_errorbooloptional

When true, a disallowed comment will result in the function returning a WP_Error object, rather than executing wp_die().
Default false.Default: false

Return value

int|string|WP_Error

Allowed comments return the approval status (0|1|'spam'|'trash').
If $wp_error is true, disallowed comments return a WP_Error.

Performance profile

How much work a call to wp_allow_comment() does, and what it touches: the algorithmic scaling, the Zend instruction count per call across PHP versions, the hooks it hands control to, and the core code that calls it. Measured from the compiled opcodes, not a stopwatch, so every number is identical on any machine running the same PHP version, and every function in core is ranked by cost.

Cost class

Heavy

Reaches the database via ->get_var().

Scaling

Constant

No loop in the body: the same number of instructions runs whatever you pass in.

Instructions

71–128

Executed per call on PHP 8.5, depending on the branch taken. The body compiles to 138.

Plugin surface

6 hooks

Third-party callbacks on 'duplicate_comment_id', 'comment_duplicate_trigger', 'comment_duplicate_message' run inside this call, and their cost is not bounded by anything here.

Called by

2

2 places in core call this, so the cost is paid more often than your own code shows.

What it touches

• hookthird-party callbacksapply_filters()called directly
• sqldatabase query->get_var()called directly

Further down the call graph this can also reach query, option, cache, serialize and transient. Those are the worst case, several calls deep and usually down an error path, not what a normal call pays.

What one call costs · 14 distinct outcomes

One number would be a lie: the work depends on which branch runs. These are every distinct cost wp_allow_comment() can have, taken from its control-flow graph on PHP 8.5.

Hooks and filters fired · 6

6 hooks fire while wp_allow_comment() runs, in this order:

1. 1
   apply_filters( duplicate_comment_id )filterline 788 (+36 into the body)

   Filters the ID, if any, of the duplicate comment found when creating a new comment.

2. 2
   do_action( comment_duplicate_trigger )actionline 798 (+46 into the body)

   Fires immediately after a duplicate comment is detected.

3. 3
   apply_filters( comment_duplicate_message )filterline 807 (+55 into the body)

   Filters duplicate comment error message.

4. 4
   do_action( check_comment_flood )actionline 835 (+83 into the body)

   Fires immediately before a comment is marked approved.

5. 5
   apply_filters( wp_is_comment_flood )filterline 858 (+106 into the body)

   Filters whether a comment is part of a comment flood.

6. 6
   apply_filters( comment_flood_message )filterline 869 (+117 into the body)

   Filters the comment flood error message.

Uses · 8

• wp_unslash()Removes slashes from a string or recursively removes slashes from strings within an array.
• apply_filters()Calls the callback functions that have been added to a filter hook.
• do_action()Calls the callback functions that have been added to an action hook.
• __()Retrieves the translation of $text.
• wp_doing_ajax()Determines whether the current request is a WordPress Ajax request.
• wp_die()Kills WordPress execution and displays HTML page with an error message.
• wp_check_comment_data()Checks whether comment data passes internal checks or has disallowed content.
• WP_Error::__construct()Initializes the error.

Used by · 2

• WP_REST_Comments_Controller::create_item()Creates a comment.
• wp_new_comment()Adds a new comment to the database.

Source code

View on Trac ↗View on GitHub ↗

752function wp_allow_comment( $commentdata, $wp_error = false ) {753	global $wpdb;754 755	/*756	 * Simple duplicate check.757	 * expected_slashed ($comment_post_ID, $comment_author, $comment_author_email, $comment_content)758	 */759	$dupe = $wpdb->prepare(760		"SELECT comment_ID FROM $wpdb->comments WHERE comment_post_ID = %d AND comment_parent = %s AND comment_approved != 'trash' AND ( comment_author = %s ",761		wp_unslash( $commentdata['comment_post_ID'] ),762		wp_unslash( $commentdata['comment_parent'] ),763		wp_unslash( $commentdata['comment_author'] )764	);765	if ( $commentdata['comment_author_email'] ) {766		$dupe .= $wpdb->prepare(767			'AND comment_author_email = %s ',768			wp_unslash( $commentdata['comment_author_email'] )769		);770	}771	$dupe .= $wpdb->prepare(772		') AND comment_content = %s LIMIT 1',773		wp_unslash( $commentdata['comment_content'] )774	);775 776	$dupe_id = $wpdb->get_var( $dupe );777 778	/**779	 * Filters the ID, if any, of the duplicate comment found when creating a new comment.780	 *781	 * Return an empty value from this filter to allow what WP considers a duplicate comment.782	 *783	 * @since 4.4.0784	 *785	 * @param int   $dupe_id     ID of the comment identified as a duplicate.786	 * @param array $commentdata Data for the comment being created.787	 */788	$dupe_id = apply_filters( 'duplicate_comment_id', $dupe_id, $commentdata );789 790	if ( $dupe_id ) {791		/**792		 * Fires immediately after a duplicate comment is detected.793		 *794		 * @since 3.0.0795		 *796		 * @param array $commentdata Comment data.797		 */798		do_action( 'comment_duplicate_trigger', $commentdata );799 800		/**801		 * Filters duplicate comment error message.802		 *803		 * @since 5.2.0804		 *805		 * @param string $comment_duplicate_message Duplicate comment error message.806		 */807		$comment_duplicate_message = apply_filters( 'comment_duplicate_message', __( 'Duplicate comment detected; it looks as though you’ve already said that!' ) );808 809		if ( $wp_error ) {810			return new WP_Error( 'comment_duplicate', $comment_duplicate_message, 409 );811		} else {812			if ( wp_doing_ajax() ) {813				die( $comment_duplicate_message );814			}815 816			wp_die( $comment_duplicate_message, 409 );817		}818	}819 820	/**821	 * Fires immediately before a comment is marked approved.822	 *823	 * Allows checking for comment flooding.824	 *825	 * @since 2.3.0826	 * @since 4.7.0 The `$avoid_die` parameter was added.827	 * @since 5.5.0 The `$avoid_die` parameter was renamed to `$wp_error`.828	 *829	 * @param string $comment_author_ip    Comment author's IP address.830	 * @param string $comment_author_email Comment author's email.831	 * @param string $comment_date_gmt     GMT date the comment was posted.

Changelog

Introduced in 2.0.0. Unchanged from 6.7.7 through 7.1.0.

1. 6.7.7
2. 6.8.8
3. 6.9.7
4. 7.0.4
5. 7.1.0

Signature, return type and hooks compared across 5 parsed releases.

About this page

Parsed data

Generated from the wordpress-develop 7.1.0 tag, from src/wp-includes/comment.php, and regenerated for each WordPress release so it tracks the code rather than a snapshot of it.

Corrections

Something wrong on this page? Report it and it gets fixed in the next regeneration.