attacker can trick both anonymous and logged in users to post comments on victim site without them realizing, while using their own credentials..
This is tiny module that adds secure token to the comment form and validate it before accepting any comment, thus making your comment forms secure as they should've been for all these years..
This plugins adds secret cryptographically-secure token to the comment form.
This is unique value and is impractical to guess it..
Upon comment subission, the comment is rejected if the secret tokens are not present or computationally invalid...
Upload the plugin files to the wp-content plugins directory, or install the plugin through the WordPress plugins screen directly..
Activate the plugin through 'Plugins screen WordPress..
Your comment forms will contain the hidden token fields that will be validated upon submission...
The following people have contributed to this plugin..
Interested in development.., check out SVN repository, or subscribe to the development log by RSS...
Read more