OpenID pre-announcement

Welcome to Geeklog Friday, May 07 2021 @ 11:29 am EDT

OpenID pre-announcement | 20 comments | Create New Account

The following comments are owned by whomever posted them. This site is not responsible for what they say.

OpenID pre-announcement

Authored by: jmatt on Saturday, June 02 2007 @ 12:21 am EDT

OK, I understand a little better now that I've actually installed it. It's cool! I didn't realize openid logon would actually create a userid in the database. I incorrectly assumed it would just be some kind of dynamic pseudo-user.

I still have a potential spam issue. With my current setup, I require anonymous users to be captcha tested to email, comment, etc. I don't require it for logged-in users, because they get captcha tested when they register. One captcha test is enough.

But openid users don't have to pass the captcha test to logon, even the first time when their userid gets created. So a spambot with an openid could bombard me. I realize I could ban or delete the userid (which I didn't realize earlier), but that still gives them an opportunity to do a lot of damage before I catch them. Prevention is better.

So, if I'm going to allow openid login, it looks like I need to require all users to pass the captcha test to do anything that might be abused by a spammer. That's a minor pain, but I can live with it. It would be a little more convenient if there was a way for openid users to get captcha tested the first time they login, or to change the captcha testing options to provide an option to require it for anonymous and remote users.

OpenID pre-announcement

Authored by: mevans on Sunday, June 03 2007 @ 01:08 am EDT

I'm working on CAPTCHA v3.0 and I will try to get OpenID support in there. My plan is to make it an option just like anonymous, so you can select to have all OpenID users enter the CAPTCHA if you want. The other big change in v3 will be removing the PHP sessions and replacing it with a db driven solution. PHP sessions seem to cause more problems than they solve right now.

Mark

---
gl Labs - extending Geeklog through plugins - www.gllabs.org

OpenID pre-announcement

Authored by: LWC on Tuesday, June 05 2007 @ 08:41 am EDT

Thanks! Don't forget the other types of remote users.

Geeklog

Search

Resources

About

Getting started

Support

Development

Topics

User Functions

What's New

Articles last 4 weeks

Comments last 4 weeks

Pages last 4 weeks

Links last 4 weeks

Downloads last 4 weeks