Joaquim Domingos António

If you wish to ‘Create comments’ using REST API, without exposing Administrator credentials to the Front-End application, you are at the right place. Since WordPress 4.7, REST API was natively included in WordPress.
In order to ‘Create a comment’ , the authentication for a user with ‘Administrator’ role is required. While this is a deliberately done for security reasons, such implementation makes it very hard for Front-End applications to implement a simple ‘Post Comment’ or ‘Reply Comment’ function.
This plugin fulfils such requirement by extending the existing WordPress REST API endpoints.
Requirements:
Minimum PHP version: 7.0 
Minimum WordPress version: 5.5
Installation:
Download the plugin form wordpress marketplace install it like any other WordPress plugin. 
After the installation activate the plugin through the ‘Plugins’ menu in WordPress
Endpoint:
When this plugin is installed one new endpoint is added to the wp/v2 namespace.
 Endpoint 
 HTTP Verb 
 Permalinks
 */wp-json/wp/v2/comments/create 
 POST 
 enabled
 */?rest_route=/wp/v2/comments/create 
 POST 
 disabled
Usage:
<ol>
<li>Create a Comment</li>
</ol>
To create a comment using REST API, send a <code>POST</code> request to:
<blockquote>
<code>/wp-json/wp/v2/comments/create</code> – if permalinks is enabled on your wordpress website.
</blockquote>
Or
<blockquote>
<code>/?rest_route=/wp/v2/comments/create</code> if permalinks is not enabled on your wordpress website.
</blockquote>
With a JSON body, as shown bellow:
<pre><code>`Json
</code></pre>
{ 
 “post”: “Post ID”, 
 “author_name”: “Comment Author’s name”, 
 “author_email”: “Comment Author’s email”, 
 “content”: “Comment content” 
} 
 `
The content may also be send as an object:
<pre><code>`Json
</code></pre>
{ 
 “post”: “Post ID”, 
 “author_name”: “Comment Author’s name”, 
 “author_email”: “Comment Author’s email”, 
 “content”: { 
 “raw”:”Comment content” 
 } 
} 
 `
Set header to:
<pre><code>`
</code></pre>
content-type: application/json 
 ` 
If successful, you should receive a response with the data of the created comment:
<pre><code>`Json
</code></pre>
{ 
 “id”: “[comment id]”, 
 “status”: “[comment status]”, 
 “message”:”[server response message]” 
} 
 `
In response header the status code should be:
<pre><code>`Http
</code></pre>
HTTP 201 Created 
 `
<ol>
<li>Reply a comment</li>
</ol>
To reply a comment you just need to add the field parent for the parent comment to the JSON body
<pre><code>`Json
</code></pre>
{ 
 “post”: “Post ID”, 
 “author_name”: “Comment Author’s name”, 
 “author_email”: “Comment Author’s email”, 
 “content”: “Comment content”, 
 “parent”:”Comment parent ID” 
} 
 `
<blockquote>
Note: Ensure the parent is a comment id that belongs to the post informed in the field post. The comment parent post id must match the post id otherwise the following error will be shown:
</blockquote>
<pre><code>`Json
</code></pre>
{ 
 “code”: “rest_post_mismatch_parent_post_id”, 
 “message”: “Post ID and Parent post ID does not match”, 
 “data”: { 
 “status”: 400 
 } 
} 
 `
<h3>Contact</h3>
If there is any thing to say about the plugin fill free to <a href="mailto:sopport@appsdabanda.com" rel="nofollow ugc">contact us</a>.

REST API Comment

REST API Comment adds in the 'Comment creation' function to the Wordpress REST API.

ishitaka

XO Security is a plugin to enhance login related security. 
This plugin does not write to .htaccess file. Besides Apache, LiteSpeed, Nginx and IIS also work.
<h4>Functions</h4>
<ul>
<li>Record login log.</li>
<li>Limit login attempts.</li>
<li>Add Captcha to the login form and comment form.</li>
<li>Change the URL of the login page.</li>
<li>Enable two-factor authentication (2FA) for login.</li>
<li>Login Alert.</li>
<li>Disable login by mail address.</li>
<li>Disable login by user name.</li>
<li>Change login error message.</li>
<li>Disable XML-RPC and XML-RPC Pingback.</li>
<li>Disable REST API.</li>
<li>Disable author archive page.</li>
<li>Remove comment author class of comments list.</li>
<li>Remove the username from the oEmbed response data.</li>
<li>WooCommerce login page protection.</li>
<li>Anti-spam comment.</li>
<li>Hide WordPress version information.</li>
<li>Edit the author slug.</li>
<li>Disable RSS and Atom feeds.</li>
<li>Activate maintenance mode.</li>
<li>Delete the readme.html file.</li>
</ul>
<h4>WordPress multisite considerations</h4>
If you set the login page separately for the main site and the subsite, you will not be able to use the password loss function of the subsite. We recommend that you set the login page to be common to all sites.

XO Security

This is awesome plugin!
It has all the features I need and is very easy to use.

Awesome!

長年、SiteGuardを使っていましたが、たまにログインできなくなってプラグインをサーバーから削除とかしたりだったので、こちらのプラグインを使い始めました。
設定画面もわかりやすく、作動も安定していて、ログイン試行履歴とかも見れます（結構不正ログインされようとしているのがわかって楽しい）、随時他のサイトのセキュリティプラグインもこちらに切り替えていこうと思っています。感謝感謝

とても良い


This one plugin completes my security measures. Thanks !!


This one is all you need !


It's my top recommendation for security plugins on WordPress sites.It includes all the security features I need.


What a great plugin!


This plugin is lightweight and easy to use, so I recommend it.


XO Security is a plugin to enhance login related security.

REST API Comment vs XO Security