Merge pull request #13466 from shariquerik/allow_comment_for_guest

fix: Allow guest to comment on Web Page & Blog Post

frappe/templates/includes/comments/comments.html

@@ -49,8 +49,10 @@
 {% endif %}
 <script>
 	frappe.ready(function() {
+		let guest_allowed = "{{ guest_allowed or ''}}";
+
 		if (!frappe.is_user_logged_in()) {
-			$(".login-required, .comment-form-wrapper").toggleClass("hidden");
+			!guest_allowed && $(".login-required, .comment-form-wrapper").toggleClass("hidden");
 		} else {
 			$('input.comment_by').prop("disabled", true);
 			$('input.comment_email').prop("disabled", true);
@@ -91,6 +93,16 @@
 				route: "{{ pathname }}",
 			}
 
+			if(!args.comment_by || !args.comment_email || !args.comment) {
+				frappe.msgprint("{{ _("All fields are necessary to submit the comment.") }}");
+				return false;
+			}
+
+			if (args.comment_email!=='Administrator' && !validate_email(args.comment_email)) {
+				frappe.msgprint("{{ _("Please enter a valid email address.") }}");
+				return false;
+			}
+
 			if(!args.comment || !args.comment.trim()) {
 				frappe.msgprint("{{ _("Please add a valid comment.") }}");
 				return false;

frappe/templates/includes/comments/comments.py

@@ -7,10 +7,13 @@ from frappe.utils import add_to_date, now
 
 from frappe import _
 
-@frappe.whitelist()
+@frappe.whitelist(allow_guest=True)
 def add_comment(comment, comment_email, comment_by, reference_doctype, reference_name, route):
 	doc = frappe.get_doc(reference_doctype, reference_name)
 
+	if frappe.session.user == 'Guest' and doc.doctype not in ['Blog Post', 'Web Page']:
+		return
+
 	if not comment.strip():
 		frappe.msgprint(_('The comment cannot be empty'))
 		return False
@@ -22,17 +25,14 @@ def add_comment(comment, comment_email, comment_by, reference_doctype, reference
 		frappe.msgprint(_('Comments cannot have links or email addresses'))
 		return False
 
-	if not comment_email == frappe.session.user:
-		comment_email = frappe.session.user
-
 	comments_count = frappe.db.count("Comment", {
 		"comment_type": "Comment",
-		"comment_email": frappe.session.user,
+		"comment_email": comment_email,
 		"creation": (">", add_to_date(now(), hours=-1))
 	})
 
 	if comments_count > 20:
-		frappe.msgprint(_('Hourly comment limit reached for: {0}').format(frappe.bold(frappe.session.user)))
+		frappe.msgprint(_('Hourly comment limit reached for: {0}').format(frappe.bold(comment_email)))
 		return False
 
 	comment = doc.add_comment(

frappe/website/doctype/blog_post/blog_post.py

@@ -109,6 +109,7 @@ class BlogPost(WebsiteGenerator):
 		context.parents = [{"name": _("Home"), "route":"/"},
 			{"name": "Blog", "route": "/blog"},
 			{"label": context.category.title, "route":context.category.route}]
+		context.guest_allowed = True
 
 	def fetch_cta(self):
 		if frappe.db.get_single_value("Blog Settings", "show_cta_in_blog", cache=True):

frappe/website/doctype/web_page/web_page.py

@@ -53,6 +53,7 @@ class WebPage(WebsiteGenerator):
 
 		if self.enable_comments:
 			context.comment_list = get_comment_list(self.doctype, self.name)
+			context.guest_allowed = True
 
 		context.update({
 			"style": self.css or "",