Page 1 of 1

Bulletproof: Commenters E-Mail

Posted: Fri Aug 31, 2007 6:00 pm
by blog.brockha.us
Wow! I noticed, that the template is publishing the email of commentors! I think, this should be at least configurable! I don't want my commentors to be spammed.. :shock:

Okay, the email is obfuscated a littel, but I think, it wont lock out real spammers..

Re: Bulletproof: Commenters E-Mail

Posted: Fri Aug 31, 2007 8:34 pm
by yellowled
blog.brockha.us wrote:Wow! I noticed, that the template is publishing the email of commentors! I think, this should be at least configurable! I don't want my commentors to be spammed.. :shock:

Okay, the email is obfuscated a littel, but I think, it wont lock out real spammers..
Hmmmm. I have to admit I have no idea what the source for this might be ... commentform.tpl basically has the same functions like default/commentform.tpl ... also, I don't think this is responsible for displaying the email address. Or is it? Garvin?

YL

Posted: Fri Aug 31, 2007 9:08 pm
by Don Chambers
Comment author emails are handled exactly the same way in BP as they are in s9y by default. FYI - it is in the comment.tpl file, and we could easily add an option in there to suppress it entirely.

Posted: Fri Aug 31, 2007 9:17 pm
by yellowled
Don Chambers wrote:Comment author emails are handled exactly the same way in BP as they are in s9y by default. FYI - it is in the comment.tpl file, and we could easily add an option in there to suppress it entirely.
... which we don't need since there's a s9y option to do that already if I remember correctly. But what does this mean if Grischa experienced it anyway? Some kind of bug in a plugin?

YL

Posted: Fri Aug 31, 2007 10:44 pm
by blog.brockha.us
The comment.tpl in the BP theme explicitly adds the commentors email, if found. I disabled the line with a "if (false and CommentorHasEmail)", now it is gone.

What s9y Option do you meen, yellowed? I think the only option s9y gives is to obfuscate it but not to supress it at all..

Posted: Fri Aug 31, 2007 11:17 pm
by garvinhicking
Hi!

The spamblock plugin and the s9y configuration should have a global option to "show commentors email addresses".

Regards,
Garvin

Posted: Fri Aug 31, 2007 11:54 pm
by Don Chambers
Email addresses are not required for comment posting by default (but can be required via the spamblock plugin). If one is provided, s9y shows that as address[at]domain.com. I think that is quite reasonable. Not every single comment poster wants to necessarily have their email address completely unavailable on a particular blog. Most of us have email accounts we use in this manner that we EXPECT to get spammed, so we set up every possible firewall, spam preventer, etc on that account. So, I personally like the way it is handled by default.

That being said, I know of no way that totally supresses the comment author's obscured email address. That MIGHT be the way the option is intended to work in the spam protector plugin, but I just tried it and it made no difference at all. Perhaps I am doing something wrong?

Posted: Sat Sep 01, 2007 2:44 pm
by blog.brockha.us
Well, it is easy to supress it changing the comment.tpl of course. And this could be configurable with a new entry in the bp templates configuration..

@Garvin: The SpamBlock plugin has this option, but using the BP theme the E-Mail is displayed even with switched off E-Mail displaying (but obfuscated). Maybe there is a bug in the SpamBlock plugin? Hmm.. I have to look into the code..

Posted: Sat Sep 01, 2007 3:12 pm
by garvinhicking
Hi Grischa!

Could it be that you'Re just seeing it because you're logged in? For logged in users, emails are not obfuscated/removed.

Regards,
Garvin

Posted: Sat Sep 01, 2007 3:23 pm
by blog.brockha.us
Rrrright! :-) That was the problem. Thanks Garvin!

Posted: Sun Sep 02, 2007 12:16 pm
by yellowled
blog.brockha.us wrote:Well, it is easy to supress it changing the comment.tpl of course. And this could be configurable with a new entry in the bp templates configuration..
I'm slightly concerned we might overload those. There are a lot of them already, so my personal opinion is to not add anything unless it's really worthwhile. I'm not sure whether this one is, though.

YL

Posted: Sun Sep 02, 2007 12:57 pm
by blog.brockha.us
It isn't as it can be done with the AntiSpam plugin already, as Garvin told me/us.

Posted: Tue Sep 04, 2007 5:43 am
by Don Chambers
Garvin nailed it - we are all looking at this as admins!!! Done issue closed, IMHO.