Re: cb_comment_reject drop comment?

On Wed, 1 Mar 2006, Tung Wai Yip wrote:
> 
> I am trying to roll a comment spam checker. There is a method 
> cb_comment_reject to use. However it can only return 0 or 1. If it is 1, 
> the submission is dropped silently. I find this too harsh for read 
> commenter who might failed the test by mistake. Is there anyway send him 
> back to a form with his last input prefilled for a second chance?

If the comment is rejected, the sender is told that the comment has been 
rejected (assuming you have the right pieces in your comment templates).

Say someone entered in teh catpcha wrong...  they'd see the rejection 
message, hit the back button on their browser, and then depending on how 
they have their browser configured, all their information could still be 
in the form fields.

If that isn't good enough, I think you'll have to either write your own 
comments plugin or adjust the existing one.


> In any case I got attack from someone trying to inject SMTP command into 
> the comment. I'm trying to use a simple scheme to filter for things like 
> '\ncontent-type:' but then I don't want to hit legit comment by mistake.

Yeah, I see this sometimes, too.  I have a word blacklist on my system 
which rejects any comment that has a blacklisted word in it.  Obviously 
this won't work for everyone and obviously it has good and bad points.

There's a discussion of the comments plugin in the manual and there's a 
section on comment spam:

    http://pyblosxom.sourceforge.net/1.3.1/manual/x954.html

That's about all I know in terms of comment spam solutions.

Hope that helps--

/will


-------------------------------------------------------
This SF.Net email is sponsored by xPML, a groundbreaking scripting language
that extends applications into web and mobile media. Attend the live webcast
and join the prime developer group breaking into this new coding territory!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642