[spam-stopper] Python API

[Phillip Pearson]

Aha, I missed that bit :-)

So THAT'S why the ksd_* functions use $ksd_api_host while verify-key
goes straight to rest.akismet.com.

That answers the question/concern nicely.  I'm sure the key is
checked.

(Just goes to show: you shouldn't implement something just by looking
at the source, because you'll miss the important bits... you've gotta
snoop the HTTP connections to see what's REALLY going on!)

Cheers,
Phil

On Wed, Nov 30, 2005 at 10:43:05AM +0000, rich boakes wrote:
> Phillip Pearson wrote:
> 
> >It seems odd, though, that comment-check, submit-spam and submit-ham
> >don't seem to require the 'key' argument.  
> 
> Hi Phil,
> 
> In the latest version of Akismet (1.11),
> line 72, which sets the akismet host, reads:
> 
> $ksd_api_host = get('wordpress_api_key') . 
> '.rest.akismet.com';
> 
> So they key is encoded into the connection 
> rather than being passed as a parameter, and is 
> therefore available for the server to check.
> 
> Whether or not the key _is_ checked by the 
> server I'll have to leave to Matt to confirm.
> 
> Rich
> --
> http://boakes.org/
> http://dsg.port.ac.uk/~rjb/
> 
> _______________________________________________
> spam-stopper mailing list
> spam-stopper at lists.automattic.com
> http://lists.automattic.com/mailman/listinfo/spam-stopper