[spam-stopper] Nonces in the Akismet API

David david at xeoncross.com
Wed Sep 14 21:00:37 UTC 2011


"Nonces" or "Form Tokens" are processed on the server side in relation to a
users session. They are not handled by Akismet (since there is no need to).

Server creates a nonce and places it in the form and the user session
User submits form back to the server
if the form nonce and the session nonce match then everything is good!

- David



On Wed, Sep 14, 2011 at 3:16 PM, james young <pronoiac at gmail.com> wrote:

> Hey there -
>
> As an anti-spam measure, I was looking into putting hidden field form
> nonces into a Mediawiki extension for Akismet, but I could use some
> clarification.  I thought that nonces were part of the Akismet API,
> but now it looks like the local Wordpress installations process them.
> So: does any related information touch your servers?  If so, I can't
> find any documentation about API usage.
>
> Thanks in advance -
>
> -James
> _______________________________________________
> spam-stopper mailing list
> spam-stopper at lists.automattic.com
> http://lists.automattic.com/mailman/listinfo/spam-stopper
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.automattic.com/pipermail/spam-stopper/attachments/20110914/45ae6d6d/attachment.htm>


More information about the spam-stopper mailing list