[spam-stopper] Python API

Phillip Pearson pp at myelin.co.nz
Wed Nov 30 10:24:15 UTC 2005


> So to check a comment, you don't *actually* need to call
> akismet_verify_key ?

akismet_verify_key is just for the UI - so Wordpress can tell the user
that they typed their key in wrong.

It seems odd, though, that comment-check, submit-spam and submit-ham
don't seem to require the 'key' argument.  If akismet.com doesn't
validate these calls in some other way, it would be possible to submit
spam and ham to other people's blogs... a bit of a security hole.

Matt?

Cheers,
Phil



More information about the spam-stopper mailing list