svip/ToyGallery — Issue #25: Make the comment approval system more sophisticated
Author: svip
Created: 2012-02-26 10:28:26+00:00
State: open
Labels: Enhancement, Security

The current comment approval system is relatively simple; *all* comments have to be approved.

To make it a little easier to weed out spam, since a39dc67 *any* comment containing a URL or what looks to be a URL will have the 'reject'-button ticked per default (the admin may obviously still choose to accept or hold rather than reject).

However, a certain type of spam includes supplying fake Facebook profiles into the Homepage link and then posting something random to get people's attention in the hope they click the Homepage link provided. And this type of spam is not as easy to deal with quickly as spam with URLs.

So, stuff to do:

* Detect and write down IPs (future system to block ips as well)
* Put the default position into Hold rather than Accept for normal text.

Maybe more ideas can come later. Creating sophisticated rule systems, etc. may be a bit of an overreaction.