It is important to note that if you use this plugin, commenters must be using a Javascript-enabled brower in order to post comments.
I have been testing this plugin on one of my blogs for about 12 hours, and I have received zero spam in that time period on that blog. I will be installing it on all my blogs today.
Installation:
1. Download Now:
2. Extract and upload MTDisguiseCommentURL.pl to your 'plugins' directory within your 'mt' directory.
3. Open your Individual Entry Archive template and find the following line:
<form method="post" action="<$MTCGIPath$><$MTCommentScript$>" name="comments_form" onsubmit="if (this.bakecookie[0].checked) rememberMe(this)">
Delete <$MTCGIPath$> and <$MTCommentScript$> and replace with a fake comment URL. An example might be http://www.mydomain.com/postcomments.cgi -- but don't use this example! Make up something unique. Remember, the URL should point to a non-existent file.
2. In the same template, after the </form> tag, enter:
<$MTDisguiseCommentURL$>
3. Rebuild your Individual Archives, and you are done. Post a test comment to make sure it works.
]]>It is fixed now.
]]>Guess it's another tool to make it harder for spammers.
]]>This means that on my individual entries, I don't have a form to fill out so I don't know where to put the tag. Any tips for me? :\
]]>Thanks!
]]>I wouldn't be concerned about those with javascript turned off. Few do so, and for those who do a simple email link on the form suffices (email if you have problems posting).
Well done!
I have been using this approach for almost two years and it works well. If really want to reduce spam, rename your comment script first, and then start using this plugin. That will make it very difficult for autmated spammers to determine the new script name, since the javascript will disguise it.
]]>I renamed the script, rebuilt the individual archives, and didn't see any spam.
Today I started getting spam comments again. MT says they are from known spammers on bsb.spamlookup.net.
I'm assuming spammers have now altered their bots to look for disguised paths to the comments CGI.
]]>Thanks!
]]>Secondly, should I install this script also on other pages that allow comment submission? (i.e. the comment pages, the comment preview pages, etc.) I may be mistaken, but they seem to use the same form...
]]>Thanks!
]]>That probably wouldn't be too difficult...
Note that you can implement this manually without too much effort. Follow the steps above but in place of the DisguiseCommentURL tag, put something like:
<script language='Javascript'>document.comments_form.action = 'http://' + 'your-domain.com/cgi-bin/mt/mt-c' + 'omments.cgi'; </script>
You can also view the source of this entry for another example.
]]>I'm a total novice helping a friend. I noticed that the randomizer in your plugin might return a value of zero or $pathlength (the latter is probably impossible), in which case the whole path could show up in $part1 or $part2. The following is the way I want to change it, but need to verify java script syntax:
my $randomnumber = int (rand ($pathlength - 2)) + 1;
Would that work? What do you think?
]]>