FM / sportzsoftlivemeet.com

/home/altere25/sportzsoftlivemeet.com

Name	Size	Mode	Actions
.well-known/	-	0755	rm
cgi-bin/	-	0755	rm
ryan/	-	0755	rm
wp-admin/	-	0755	rm
wp-content/	-	0755	rm
wp-includes/	-	0755	rm
.ftpquotas	91	0644	edit dl rm
.htaccess	2087	0644	edit dl rm
.htaccess.07122020.bak	461	0644	edit dl rm
.htaccess.07272020.bak	461	0644	edit dl rm
.htaccess.bgb	461	0644	edit dl rm
boldgrid-backup-livemeetdev.altereddigital.com-a5966a83-20200908-201114.log	1159	0644	edit dl rm
index.php	405	0644	edit dl rm
khttohkd.php	7317	0644	edit dl rm
license.txt	19915	0644	edit dl rm
php.ini	635	0644	edit dl rm
readme.html	7409	0644	edit dl rm
wp-activate.php	7387	0644	edit dl rm
wp-admin.php	0	0644	edit dl rm
wp-blog-header.php	351	0644	edit dl rm
wp-comments-post.php	2323	0644	edit dl rm
wp-config-sample.php	3033	0644	edit dl rm
wp-config.php	3281	0600	edit dl rm
wp-cron-daig.php	1659	0644	edit dl rm
wp-cron.php	5638	0644	edit dl rm
wp-links-opml.php	2502	0644	edit dl rm
wp-load.php	3937	0644	edit dl rm
wp-loader.php	0	0644	edit dl rm
wp-login.php	51260	0644	edit dl rm
wp-mail.php	8525	0644	edit dl rm
wp-settings.php	28774	0644	edit dl rm
wp-signup.php	34519	0644	edit dl rm
wp-trackback.php	4885	0644	edit dl rm
xmlrpc.php	3246	0644	edit dl rm

Edit: /home/altere25/sportzsoftlivemeet.com/wp-comments-post.php (2323B)

<?php
/**
 * Handles Comment Post to WordPress and prevents duplicate comment posting.
 *
 * @package WordPress
 */

if ( 'POST' !== $_SERVER['REQUEST_METHOD'] ) {
	$protocol = $_SERVER['SERVER_PROTOCOL'];
	if ( ! in_array( $protocol, array( 'HTTP/1.1', 'HTTP/2', 'HTTP/2.0', 'HTTP/3' ), true ) ) {
		$protocol = 'HTTP/1.0';
	}

header( 'Allow: POST' );
	header( "$protocol 405 Method Not Allowed" );
	header( 'Content-Type: text/plain' );
	exit;
}

/** Sets up the WordPress Environment. */
require __DIR__ . '/wp-load.php';

nocache_headers();

$comment = wp_handle_comment_submission( wp_unslash( $_POST ) );
if ( is_wp_error( $comment ) ) {
	$data = (int) $comment->get_error_data();
	if ( ! empty( $data ) ) {
		wp_die(
			'<p>' . $comment->get_error_message() . '</p>',
			__( 'Comment Submission Failure' ),
			array(
				'response'  => $data,
				'back_link' => true,
			)
		);
	} else {
		exit;
	}
}

$user            = wp_get_current_user();
$cookies_consent = ( isset( $_POST['wp-comment-cookies-consent'] ) );

/**
 * Fires after comment cookies are set.
 *
 * @since 3.4.0
 * @since 4.9.6 The `$cookies_consent` parameter was added.
 *
 * @param WP_Comment $comment         Comment object.
 * @param WP_User    $user            Comment author's user object. The user may not exist.
 * @param bool       $cookies_consent Comment author's consent to store cookies.
 */
do_action( 'set_comment_cookies', $comment, $user, $cookies_consent );

$location = empty( $_POST['redirect_to'] ) ? get_comment_link( $comment ) : $_POST['redirect_to'] . '#comment-' . $comment->comment_ID;

// If user didn't consent to cookies, add specific query arguments to display the awaiting moderation message.
if ( ! $cookies_consent && 'unapproved' === wp_get_comment_status( $comment ) && ! empty( $comment->comment_author_email ) ) {
	$location = add_query_arg(
		array(
			'unapproved'      => $comment->comment_ID,
			'moderation-hash' => wp_hash( $comment->comment_date_gmt ),
		),
		$location
	);
}

/**
 * Filters the location URI to send the commenter after posting.
 *
 * @since 2.0.5
 *
 * @param string     $location The 'redirect_to' URI sent via $_POST.
 * @param WP_Comment $comment  Comment object.
 */
$location = apply_filters( 'comment_post_redirect', $location, $comment );

wp_safe_redirect( $location );
exit;

cmd: