Had several reports of people being confused about the watchdog message "Mollom ID x has been tampered with: it was generated for a user with sid y, but is used by a user with sid z." How can we make this more clear? Should we add something to the module handbook pages about it?
| Comment | File | Size | Author |
|---|---|---|---|
| #5 | mollom-DRUPAL-6--1.watchdog-session.patch | 2.84 KB | sun |
| #3 | mollom-HEAD.watchdog-session.3.patch | 2.92 KB | sun |
| #1 | mollom-HEAD.watchdog-session.patch | 2.76 KB | sun |
Comments
Comment #1
sunNot only the message strings need work, but also the severity levels.
Some of them are clear indicators for malicious actions performed on a site. Mollom should at least warn about them.
Comment #2
dries commentedThese changes look good to me, although I'm a bit afraid they are going to increase our support burden. Already, we get people e-mailing asking us what to do about those problems. When seeing those messages, people don't always realize that Mollom is doing its job (versus Mollom being broken).
Comment #3
sunAlternative patch. Some more discussion may prevent support requests in the first place. Doable, I think.
Comment #4
dries commentedLooked at the latest patch with a fresh pair of eyes (good morning!), and decided it is an improvement. Committed the patch in #3 to CVS HEAD (Drupal 7).
Comment #5
sunSame patch for D6.
Comment #6
dries commentedGreat. Committed to DRUPAL-6--1. Thanks sun.