Fixed #8963 -- Use the require_POST decorator instead of doing things manually...

from django.template import RequestContext

from django.template.loader import render_to_string

from django.utils.html import escape

from django.views.decorators.http import require_POST

from django.contrib import comments

from django.contrib.comments import signals

    HTTP POST is required. If ``POST['submit'] == "preview"`` or if there are

    errors a preview template, ``comments/preview.html``, will be rendered.

    """

    # Require POST

    if request.method != 'POST':

        return http.HttpResponseNotAllowed(["POST"])

    # Fill out some initial data fields from an authenticated user, if present

    data = request.POST.copy()

    if request.user.is_authenticated():

    return next_redirect(data, next, comment_done, c=comment._get_pk_val())

post_comment = require_POST(post_comment)

comment_done = confirmation_view(

    template = "comments/posted.html",

    doc = """Display a "comment was posted" success page."""