An anonymous user can post comments for a registered user

[raetsche]

Hi there,

again a question concering the comment function of coppermine.

As an anonymous user i can post comments using a free selectable name. But that's a problem! So an anonymous user can post comments for a registered user. For example if I've got a user called "admin" an anonymous user can also post comments as "admin", when he fills the field name with "admin"
There's no function which checks if a user already exists as far as i know.

Is this implementable and maybe somebody already knows a solution?
My idea is the following. If a guest user adds a comment his name is automatically appended with "(guest)", so everybody knows that this is not the registered but a guest user. In the example mentioned above, the user name would be "admin (guest)"

Nice greetings and thanks!

[Nibbler]

Dead simple,

add the following in line 120 of db_input.php

Code Select Expand


$msg_author .= ' (guest)';


[Joachim Müller]

even more simple: don't allow guests to post comments at all. The internet is fool of fools who hide behind anonymity (or something they think that exists called anonymous surfing). Every web page that allows user interaction (like posting comments) needs some form of moderation...

GauGau