User comments for pages

[r2d2]

so today i've think to use sqlite to save some iformation..

now comment atuor e falg are saved in the same xml of pagecontent...
but i think would be more safe to save it in a different file...
and perhaps ina a flat-talebd-files like sqlite...

this is compatible whit the philosofy of project for u?

IMO the real power of GetSimple is XML, so it seems a bit useless to change the technology to sqlite.

[rzientek]

How can I delete user comments?

[Stew_822]

Can I give a suggestion? The "comments" header should only be displayed if there is actually any comments . I love this plugin, apart from that, so thanks! Also (if you like) you can put the submit button in a div element, so it gets displayed below the message area. Scroll down to line 246 and you'll see this:

Code:

<input name="Post_comment" type="submit" value="Post Comment" />

To make it show below the textarea change it to this:

Code:

<div>
<input name="Post_comment" type="submit" value="Post Comment" />
</div>

Hope that helps! Thanks for the plugin! Good job!
By the way, I vote against using SQL

EDIT: Thought of an improvement: When someone comments the admin gets an email. You could also make an option for this .

[Oleg06]

I also voted against the use of SQL
simply attach a reCAPTCHA
http://www.google.com/recaptcha

[mindfullsilence]

I'm no php guru so I might be completely off on this, but I was wondering if there was a way to use some of the functionality of the template tag "get_page_clean_title()" to strip out any html the user might input into the comment text-area. As it stands, the user can pretty much run rampant with html in their comments.

Another, perhaps more desirable function would be to restrict the user to certain kinds of html. Like, say, paragraphs, and links only. Just a thought. I'm a little worried about someone writing a comment that completely destroys my page.

I just tested this with a comment that started like this:

Code:

</form>
<div style="

width: 1600px;
height: 1000px;
position: absolute;
z-index: 9999;
top: 0px;
left: 0px;
background-color: white

">I can pretty much put anything in here and completely take over this pages display! :(
</div>

This actually worked. I really don't want any spammers or hackers to kill my pages, and honestly there's a decent chance that if it's possible...someone's going to do it.

Anything I can do to avoid this and still have comments?

[Oleg06]

I added the following comment

Code:

<style>
<!--
#dd {
width: 1600px;
height: 1000px;
position: absolute;
z-index: 9999;
top: 0px;
left: 0px;
background-color: white;
text-align:center;
font-size:40px;

}
-->
</style>
<div id=dd>
ha-ha-ha
</div>

and it worked

[Oleg06]

then I added the following comment

Code:

<style>
<!--
#dd {
width: 1000px;
height: 500px;
position: absolute;
z-index: 9999;
top: 40px;
left: 40px;
background-color: white;
text-align:center;
font-size:40px;

}
-->
</style>

and it worked
so I removed the comments on my site

[cumbe]

Change line +- 73:

$commento->comment_text->addCData(htmlentities($_POST['comment_text'], ENT_QUOTES, 'UTF-8'));

Regards.

[Oleg06]

Oh, thank you, I can include them on my site

[devaintfire]

Does anyone have a copy of this still available for download?

[Oleg06]

ooops

[rzientek]

on my site jquery warnings doesn't work http://orzelnaklo.pl/test/ why? a script conflict?

[Oleg06]

attach the script jquery.js in header

[rzientek]

Hi,
why when I updated the getsimple from version 2.03 to version 2.03.1 in plug-in comments all the graphics disappear http://orzelnaklo.pl/test/ so i add code from comment css to general css file and graphics is ok but jquery warnings still dosn't work why ??

(I overwrite admin folder, index.php file when i updeted)

Please help

[focoves]

Oleg, could you post attaching the plugin ?
does it works under GS 2.03.1?
txs

[Oleg06]

http://neowebtime.ru/0/aa

[focoves]

thanks Oleg, I have checked at your website and work fine.

PLEASE, can you ATTACH the plugin ?

[Oleg06]

http://neowebtime.ru/comments.zip
Do not forget to connect to the template jQuery script