I have been getting hit hard by some comment spam on a client site for the past week. I was really confused as I even turned off comments and it was still posting them. It was not till I searched for the title of the entry on the edit page that I got a clue as to what had happened. The client had posted an event to their calendar with the same title as the title of a blog post. The intelligent spammer somehow figured out that he could post comments to the site by subsituting the entry titles for other channels into the url structure for the blog/comments. So in other words instead of sitename.com/blog/comments/blogentrytitlehere he typed in sitename.com/blog/comments/eventcalendarentrytitlehere and it allowed him to post comments to that channel.
So… when creating the channels for your sites make sure to shut off comments for all channels that don’t require them. It can be found in admin -> Channel (weblog) administration -> Channel (weblog) Management -> Edit Channel (weblog) Preferences. Find Comment Posting Preferences on the left hand navigation. The radio button at the top turns them off.

This is just a quick blog post to relay some info I just learned. I am in the process of upgrading Show-ee from 1.6.8 to 1.7 and then to 2.1.4b. As part of that site we used to use FieldFrame from Pixel & Tonic. Specifically we were using the CheckBox Group fields for the checkboxes that tell what add-ons a developer used. Well as part of the process I upgraded from 1.6.8 to 1.7 but neglected to upgrade all of the add-ons before moving to 2.1.4.
This is the second installment in our Creating installable templates tutorials for ExpressionEngine. In this post we are going to talk about the actual package that needs to be delivered to the end user and all of the associated files. Plus we even have a bonus of some useful code for you.
For a long time now I have struggled with removing index.php from my EE websites. I have used a mix bag of the include/exclude method and add-ons that deal with making the include/exclude method easier.
A year ago I was perusing the user guide and wiki over on ExpressionEngine’s website for any information regarding creating your own installable templates. At that time there were none. At I just did a quick search for some of the files involved like theme_preference.php and default_content.php and the information available is still minimal.
Related Articles