Hi guys,

nice work, I like this module a lot. However I am bit confused as there is an option to subscribe for follow-ups for anonymous users... How do you know the e-mail address then?

Petiar

Comments

naveenpl’s picture

If an anonymous user provides his e-mail address to a comment and he enable the option to receive mail for that comment, then that user will receive mail for that comment.

Cheers.

lajewl’s picture

Hi guys,

I was wondering if you could help with something that I've been puzzling over - let's say anonymous users have permission to leave a comment, and are required to provide their email addresses. As an admin, how can I see/access/take advantage of these entered emails? I can't seem to find these emails anywhere.

I'm curious about the answer both with and without this module (which I agree sounds great :).

Btw, don't know if this matters but I'm running 5.x (5.3, I think).

Thank you,

Julia

naveenpl’s picture

Mail address is saved in comment table. If you view the details of a certain comment as an administrator , you can see the details of the all the users who has participated in that comment.

Cheers.

zyxware’s picture

If you login as administrator and then edit the comment then you can access the email information from the administration link on top.

design4effect’s picture

Allowing anonymous users to automate mailings to an unverified eMail address is just asking for trouble.

  1. Spammer connects to site and posts comment containing the spam he wishes to send along with the eMail address of the person he wishes to spam.
  2. He then posts a follow-up comment and the victim gets spammed.

Since the eMail comes from your site, you are considered the spammer.

Even letting anonymous users post comments is a risky situation.

Sending an eMail to anyone that you can't prove they agreed to accept, is risky.

The best way to prevent this might be to require eMail confirmation before publishing.

- Kent

zyxware’s picture

Assigned: Unassigned » zyxware

>> Allowing anonymous users to automate mailings to an unverified eMail address is just asking for trouble.

You can always use a captcha module to prevent automated spam submissions

>> 1. Spammer connects to site and posts comment containing the spam he wishes to send along with the eMail address of the person he wishes to spam. 2. He then posts a follow-up comment and the victim gets spammed.

The content of the comment is not sent to the user. Only the excerpt of the node is sent. The content to be sent is also available as a template that can be edited by the admin. So this can be taken out too if needed

>> Sending an eMail to anyone that you can't prove they agreed to accept, is risky.

The user has the option to unsubscribe from the comment or unsubscribe from all comments on that node.

>> The best way to prevent this might be to require eMail confirmation before publishing.

This is a very ineffective way to induce a casual visitor to comment on your site. Allowing anonymous visitor to comment is a very easy way to get spammed and at the same time it is the most efficient way to get them comment on your site.

petiar’s picture

Hi Kent,

have you heard about Captcha yet? Or Akismet? ;-) I don't think anyone would allow anonymous users to post comments without implementing either of those. Good point, though.

Petiar

zyxware’s picture

Which part was good? :). Point 1 raised by design4effect has been proven to be a wrong assumption because the content submitted by the commenter is never sent to the end user.

jscoble’s picture

Captcha helps but it isn't a cure for following best practices. There are a couple of known ways around Captcha but I doubt any spammers would go through that for most sites. There are too many low hanging fruit to pick in the internet, but if the reward is sufficent, it will be done by someone. At this point the Captcha workarounds seem to be focused on the large sites, especially the 'free email' ones.

What Kent is saying is prudent. Unless you don't care about email you should follow practices that minimizes the chance of SPAM originating from your mailserver and your domain being incorrectly listed on a SPAM list. Your mailserver can end up on a SPAM list even if no SPAM has been sent from it just from the way it is configured.

zyxware’s picture

Priority: Normal » Minor

Which aspect of the process are you saying is spam? The notification from the system allows the user to unsubscribe at will. Additionally the notification only has system generated content. Besides the notifications will be sent only on approval of the posted comments.

whiztech’s picture

Hello

I have a problem. If anonymous user post a comment on my site, there are no e-mail field to be filled. How to create the e-mail field in the comment posting form for anonymous user?

px’s picture

I seem to have two problems with this module (v6.x-1.0):

  1. Anonymous users cannot unsubscribe via the link in the notification email. All they get is an "Access Denied" page.
  2. The sender email address is not configureable. Instead the site wide emailaddress is used. Since a lot of typos can be expected from anonymous users, a great deal of bounces can be expect as well, which I do not want to have on that mailaccount.
wwwoliondorcom’s picture

hi,

" Anonymous users cannot unsubscribe via the link in the notification email. All they get is an "Access Denied" page. "

Go to:

Permissions / comment_subscribe module / Disable (for anonymous users) and then anonymous will we able to unsubscribe from nodes.

BUT I can't find this option for Drupal 5, any idea ?

Thanks.

zyxware’s picture

Hi whiztech,

We apologise for the delay.

To solve your problem goto comment settings page , there you can see an option 'Anonymous posters may leave their contact information',
select that option.

Regards

zyxware

zyxware’s picture

Status: Active » Fixed

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for two weeks with no activity.