Guests should be allowed to comment on a page but we still want to avoid automated comment adding and captcha is a solution which already exists.
If a captcha is displayed on each comment form which shows at the bottom of each page then each page load will require the generation of a captcha which will hurt performance. A. When the user is anonymous, don't show the comment form, instead show a link "Add Comment" and load the form and image through ajax. This would not be a major change since anonymous users currently don't see the comment form. B. Display the form but strip the 'Add Comment' button and force the user to preview the comment and load the image with the preview button. Of course the behavior must be different when users don't have Javascript and they are viewing the comments through "?viewer=comments" so there would have to be some means of detecting how commentsinline was being loaded. In order to keep the core from becoming dependent on the captcha module, the commentadd action will have to be duplicated in commentinline.vm I see no other way around it. Any other ideas? Caleb _______________________________________________ devs mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/devs
