« Test umlaut | Main | Entry Post 2.0 - Extra Fields and MT4 Support »

Comment Registration v1.2 - Important Security Bug Fixed

Comment Registration is a plugin for Movable Type that enables readers to register an account on your site and login to post comments. Commenters register and login directly with your site, not via an external authentication service (this plugin does not use TypeKey).

UPDATE: The latest version of this plugin, version 1.2, includes an important security bug fix. It is highly recommended that sites using previous versions upgrade to version 1.2 immediately. Simply upload the new version to upgrade -- there is no need to edit or re-install templates.

Movable Type supports comment registration (authentication), but commenters must register and sign via TypeKey, a centralized authentication service offered by Six Apart (the makers of MT). While this "remote authentication" approach has some key advantages, there are also reasons why you might prefer a "local authentication" system. The Comment Registration plugin provides this option.

Comment Registration works with the built-in Commenter system of MT (see the "Commenters" menu item on the left-hand navigation menu). When someone creates a commenter account on your site and posts a comment, they will appear on the Commenters screen, including their Nickname, username, URL, email, and a tally of their comments:

Note: Commenters must post at least one comment before they appear on the Commenters listing. If someone creates an account but does not post a comment, they will not appear in the listing.

Because the plugin uses the the built-in Commenters system, you can use all the MT commenter features, such as:

  • Trusting and Banning commenters:
  • Settings for accepting comments:
  • Settings for publishing comments:

Comment Registration comes with 4 default templates (based on the default MT3.3 templates):

Commenter Login - An index template that contains a login form for commenters.
Commenter Registration - And index template that contains a form for creating a commenter account on your system.
Site Javascript - This is a replacement index template for the existing Site Javascript (mt-site.js) template. (Your existing Site Javascript will be renamed as a backup during installation).
Widget: Commenter Login - A Widget Manager widget that you can add to your sidebar, containing a login form for commenters.

Test it Out Now

Head over to the MT Hacks Test Blog and register for an account and then submit a few comments. Start at this test entry by clicking here.

Installation:

  1. Extract the files from the zip file, and upload the contents of the 'plugins' directory to the 'plugins' directory of your MT installation.
  2. Change the permissions on the mt-login.cgi file to 755 (CHMOD 755).
  3. Browse to the blog you want, then go to Settings - Plugins, and then the Settings button for Comment Registration. You will notice that the plugin has no settings of its own, but you will find a link to install the default templates. Click that link. The default templates will be installed and rebuilt.
  4. You must have Authentication enabled for the default templates to work (if you currently allow TypeKey authentication, you can skip this step). Go Settings > Feedback and find the "Authentication status" setting. In field after "Or, manually enter token", enter some text (anything will do).
  5. (Optional) Adjust the Feedback settings for accepting and publishing comments (see images above) as desired.
  6. Save Feedback settings and then manually rebuild the Site Javascript (mt-site.js) index template.

Requirements

  • MT 3.3x

Note that this plugin does not work with MT4, as this plugin's features have be built-in to MT4.

Get Comment Registration

Comment Registration is free for personal use, but you must place a link on your site, such as:

Powered by the <a href="http://mt-hacks.com/commentregistration.html">Comment Registration</a> plugin for Movable Type.

Donations are appreciated:

Download

Membership required, please sign-in or register:

Commercial License (up to 5 blogs) - $97

Blog Network License (unlimited blogs) - $249

Note for multi-blog installations / blog networks: commenters need only create one account and can use the same login for all of the sites on the same MT installation.

As always, comments and feedback are appreciated. Please reply to this entry.

Rate this entry:

  • Currently 5/5
  • 1
  • 2
  • 3
  • 4
  • 5
Rating: 5/5 (1 votes cast). Powered by the Ajax Rating plugin.

TrackBack

TrackBack URL for this entry:

Listed below are links to weblogs that reference Comment Registration v1.2 - Important Security Bug Fixed:

» Perlico Continues to Offer Biggest from comparison price save
For a full price comparison versus Eircom see www.perlico.com. Perlico, the leading alternative provider of phone and Internet services to [Read More]

» A hypnotic blend of art from bedroom cool idea
As in the dream landscape of Luis Buñuel’s 1929 surrealist masterpiece Un chien andalou – in which the narrative moves [Read More]

» Ab belt from Ab belt
Also works well with hodia slim and noni juice. Testimonials: “ I’ ve used the Supa Slim, Slim- 1 and Super Greens together with great results. Lost 10 lbs over 3 months and have kept it off ever since. [Read More]

» Resveratrol from Resveratrol
These bookmark sites allow you to share your personal bookmarks with the public. This is where the term“ social” comes into play. When you bookmark a site other people can also find the site that you bookmarked if they enter the same tag that you class... [Read More]

» Car Donations from Car Donations
That used car yours can do a lot of good for people in need. Consider donating yours to a worthy cause... [Read More]

Comments (6)

nixx [TypeKey Profile Page]:

im having trouble with this. i'm halfway between installing and uninstalling. suddenly my templates, after installing this, have errors.

"An error occurred publishing entry 'New Comment Moderation System': Publish error in template 'Individual Entry Archive': Error in tag: Error in tag: Error in tag: Error in tag: Error in tag: Error in tag: Error in tag: TypeKey authentication is not enabled in this blog. MTRemoteSignInLink can't be used."

i know i've fiddled with my templates a lot. i dont know nwhat this is telling me tho. nor can i "undo" the plugin. i'm not sure where to go from here. why do i always do these thigns live! must remember to use the sandbox...

nixx [TypeKey Profile Page]:

these directions were written pre-MT4, i take it? they dont quite apply anymore. any help with using this in MT 4?

nixx [TypeKey Profile Page]:

sorry, i pasted the URL above so if it helps to see the actual page/blog. any feedback welcome on this plugin as now my old moderation plugin doesnt work.

nixx [TypeKey Profile Page]:

whew. i have it all out now. dont know if it is not suited for MT4 or if something went wrong with my implementation, but i still seek a viable method of moderating comments, sadly.

nixx, this plugin is not supported under MT4. In fact, Six Apart has purchased the rights to this plugin and comment registration is now a built-in feature of MT (check your Blog Preferences).

As such you should delete the /plugins/CommentRegistration/ directory and all its contents. You can also delete the Comment Registration templates, although they shouldn't cause any problems. Please let me know if you have any residual problems as a result.

tom:

[…] self-propagating malware in the first place. Share this post: email it! | bookmark it! | digg it! | live it! Published Wednesday, February 28, 2007 7:11 PM byharry […]

Post a comment

Gift idea: Buy Seinfeld DVD box set, complete 9 seasons!