I'm kinda confused.
We've introduced webform for some anonymous forms. Now whith 3.x-dev we have mollom support, but only on a per-form basis. So we (administrators) need to setup mollom support for each webform - whereas the permission lookup gets cluttered with every webform node that exists (and there are a lot).

What we'd like to have is much more simple:
Enable mollom protection for all forms that are accessible to unauthenticated/anonymous users.
I would have expected to see a permission like "Webform: anonymous postable"
Or then an option in each webform to "enable mollom to protect this form from spam submissions".

This capability should be up to the webform creator - not the site administrator.

Am i so wrong?

Comments

quicksketch’s picture

Category: support » feature

There's not much we can do on the Webform side about webforms cluttering up the Mollom settings pages, Webform simply implemented the hook that Mollom provides. The entire support for generic forms in Mollom is a bit new, so I'm sure they're open to suggestions to improving the interface on that side of things. The permission to "Protect all Webforms by default" is something that should probably be controlled by Mollom, since it's ultimately responsible for determining when a captcha is shown.

On the Webform side of things, we could add an option under node/x/webform/settings to turn on/off Mollom (or Captcha module) on a per-form basis. We actually used to provide built-in captcha support, before the captcha module broke the APIs (twice) and ultimately just became a generic tool that Webform didn't need to have any integration with anyway, which was a relief because the APIs kept breaking.

However it seems that both modules have calmed down (slightly) and I'd be willing to re-integrate with them individually. In the mean time however, you're correct in that only users who have "administer mollom" permission can enable spam control on webforms.

mauritsl’s picture

Would be nice to have a link to the issue on the Mollom project about this:

#774188: Administration incapable of handling large amounts of (sub-)forms of a module

quicksketch’s picture

Title: generally protecting webform with mollom » Provide direct Mollom and CAPTCHA module support to allow authors to enable instead of administrators

Updating title. Any users interested in submitting patches I'd be happy to look at them.

sun’s picture

Status: Active » Postponed

Postponing on that issue.

quicksketch’s picture

I'm not sure we need to postpone integration on the Webform side, where we'd need to add the "spam" column to the webform table. We can integrate with both CAPTCHA and Mollom and provide the option based on whichever service is available.

I'm thinking a simple checkbox such as:

[x] Provide a CAPTCHA on this form to prevent Spam

Or for Mollom:

[x] Protect this form with Mollom to prevent Spam

This checkbox would set the "spam" column in the database, and when the form was displayed it'd call the necessary API function to CAPTCHA-protect or Mollom-protect the form, regardless of administrator-defined options (though hopefully merging in admin-defined options if available).

sun’s picture

Hm. Tough. You'd have to set a "default Mollom configuration" for all webforms then. And you most likely won't be able to use Mollom's text analysis (as that requires to manually enable individual form fields for text analysis). But of course, you should be able to relatively easy protect the form with Mollom's CAPTCHA only (which does not depend on a field configuration).

Normally, the Mollom module should be able to allow this, but I need to think about it.

quicksketch’s picture

And you most likely won't be able to use Mollom's text analysis (as that requires to manually enable individual form fields for text analysis).

Hm, I don't suppose we can pass into Mollom the configuration we want used? I think most users will always want analysis on all textfields, textareas, and e-mails.

quicksketch’s picture

attheshow’s picture

The checkbox is a great idea. I have a lot of editors who build their own forms and I'm unable to keep track of all of the forms that need to be added to the Mollom protected form list. It would be great if they could do this on their own.

WeRockYourWeb.com’s picture

Looks like the auto-protect functionality for webforms is now included in Mollom. Sweet :)

sun’s picture

No idea what #10 is referring to, but there have been no changes to Mollom.

Instead, we're currently seeing an uptick of issues that claim that the author information is not properly mapped, which leads to improper content classifications by Mollom, as detailed in #1173570: Webform: Text analysis has author fields in post body -- however, that's a separate issue, not to be discussed here.

danchadwick’s picture

Issue summary: View changes
Status: Postponed » Closed (won't fix)

There won't be further feature development in the X.x-3.x branches.

sun’s picture

Sure, new features go into the latest major/minor first. Why did you close this issue?