On Thu, Apr 11, 2013 at 9:01 AM, Joachim Dreimann < [email protected]> wrote:
> [...] > > Can we pass a key or something similar along in the URL that allows users > to anonymously create tickets? I'm aware that this is a potential avenue > for spam bots, but I still firmly believe that spam bots are > technical/management issues for us to solve, and we should not to > discourage users with our prevention methods as we're doing at the moment. > Yes, I think that we should be concerned that our barrier to posting an issue or other contribution may be too high at the moment. If I came to the site and couldn't immediately register and create a ticket, I may go away and never report the issue. I'll look into what we might do and propose some additional suggestions as part of the work on #503. The guys who setup trac-hacks felt that registration was even too high of a barrier, so it's possible to create an anonymous ticket on that site. That comes with other problems that I won't go into here, but I'll just say that spam is not a significant problem on trac-hacks.org, even though we are still running a very old version of SpamFilterPlugin. I monitor the RSS feed for both trac-hacks.org and trac.edgewall.org and see only a dozen or so instances of spam per week on each site; sometimes more, sometimes none. Cleaning up the spam on the former doesn't take up much of my time - I just spend a few minutes reviewing the RSS feed each morning and delete any spam that has come through.
