When using IE8 to post a comment as an anonymous user with content moderation enabled, that comment is somehow "exposed" to any other browser without a session ID set (visiting the site for the first time). Submitting an anonymous comment with another browser subsequently hides the unpublished comment.

CommentFileSizeAuthor
#5 su_comments-boost_caching-6.x.patch409 bytesAlexisWilke

Comments

siliconmind’s picture

Priority: Critical » Minor
Status: Active » Postponed (maintainer needs more info)

I wasn't able to reproduce this issue. Can you post exact steps and config info?

jumoke’s picture

I am having this same problem. IE8 shows exposes unpublished comments to anonymous users, did you find a fix? CSS? Please share

flutedrumr’s picture

No, never found a fix.

AlexisWilke’s picture

Title: IE8 exposes anonymous unpublished comments (all browsers with boost!) » IE8 exposes anonymous unpublished comments
Version: 6.x-1.2 » 6.x-1.0
Assigned: AlexisWilke » Unassigned
Category: support » bug
Priority: Minor » Critical
Status: Fixed » Active

I got this error in all browsers.

The fact is that I have boost running and thus the page is cached for that Anonymous user... and then all the following anonymous users see that same cached page.

Whenever you generate that comment, you must make sure that boost does not cache the page or else... the "moderation" won't really do much good.

To me this seems to be a critical error (to not say a security issue) since an unaware admin could get spam on his site that's visible by many... (him included, except that he won't know that other anonymous users can also see the message!)

I will see if I can provide a patch for this.

Thank you.
Alexis

AlexisWilke’s picture

Title: IE8 exposes anonymous unpublished comments » IE8 exposes anonymous unpublished comments (all browsers with boost!)
Version: 6.x-1.0 » 6.x-1.2
Assigned: Unassigned » AlexisWilke
Priority: Minor » Critical
Status: Postponed (maintainer needs more info) » Active
StatusFileSize
new409 bytes

Okay, I have resolved the issue with Boost. Now, it is not unlikely that the previous users had a different problem since they mentioned the problem in IE8 versus other browsers.

This patch is required for anyone who runs boost.

Thank you,
Alexis Wilke

siliconmind’s picture

Category: bug » support
Priority: Critical » Minor
Status: Active » Needs review

Well, it seems that the issue is not with the su_comments module but the boost itself. Hence it's not even a bug (at least not in case of su_comments).

Can anyone else confirm that this patch fixes this issue?

siliconmind’s picture

Status: Needs review » Fixed

Since no one else is reporting this issue, let's call that one fixed.

AlexisWilke’s picture

SiliconMind,

If you think that this issue is a Boost issue, then you should bounce it off to the Boost people (by changing the Project entry of this issue).

Personally, I fixed it and it works for me. Whether you want to include the patch in your module does not matter much to me... 8-)

Thank you.
Alexis

Title: IE8 exposes anonymous unpublished comments » IE8 exposes anonymous unpublished comments (all browsers with boost!)
Version: 6.x-1.0 » 6.x-1.2
Assigned: Unassigned » AlexisWilke
Category: bug » support
Priority: Critical » Minor
Status: Active » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.