Hi, On Mon, Feb 22, 2010 at 2:28 PM, Caleb James DeLisle < [email protected]> wrote:
Guests should be allowed to comment on a page but we still want to avoid automated comment adding and captcha is a solution which already exists.
If a captcha is displayed on each comment form which shows at the bottom of each page then each page load will require the generation of a captcha which will hurt performance.
A. When the user is anonymous, don't show the comment form, instead show a link "Add Comment" and load the form and image through ajax. This would not be a major change since anonymous users currently don't see the comment form.
B. Display the form but strip the 'Add Comment' button and force the user to preview the comment and load the image with the preview button. Of course the behavior must be different when users don't have Javascript and they are viewing the comments through "?viewer=comments" so there would have to be some means of detecting how commentsinline was being loaded.
In order to keep the core from becoming dependent on the captcha module, the commentadd action will have to be duplicated in commentinline.vm I see no other way around it.
Any other ideas?
I like B. However if it's too hard to implement without breaking the need to let users without javascript do it I'm fine with A as well. Guillaume
Caleb
_______________________________________________ devs mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/devs
-- Guillaume Lerouge Product Manager - XWiki SAS Skype: wikibc Twitter: glerouge http://guillaumelerouge.com/