If you enable comments on MT, read this...

The uber-techie Yuri has pointed out that Movable Type displays commentors email addresses by default. Even with the little bit of obfuscation that MT employs (which is ineffective in the current spam arms race), this opens up commentors to tons of spam.

So, if you enable comments in MT, it is your duty to make sure that email addresses are not displayed (the following will display commentors websites, not their email addresses... this is adapted from this post by Dan Hersam at Admist a tangled web):

1. Log-in to your blog in Movable Type.
2. Click on the "Templates" button on the left of your screen.
3. Scroll down and find the "Edit comment listing template" button and click it.
4. This is the small hard part: Find the part of the template a ways down that says:

<$MTCommentAuthorLink spam_protect="1"$>

5. Delete the spam_protect and add a show_email so that it looks like this:

<$MTCommentAuthorLink show_email="0"$>

6. Save the template.
7. Rebuild your whole site.

Posted by joebeone at Diciembre 18, 2003 10:00 AM