http://www.magentocommerce.com/bug-tracking/ en MagentoCommerce Copyright {gmt_date format="%Y"} {gmt_date format="%Y-%m-%dT%H:%i:%s%Q"} http://www.magentocommerce.com/bug-tracking/issue?issue=3863 Posted: 2008-10-30 17:49:03
Category: Reviews
Version: 1.1.6
Priority: high
Status: closed
Reported By: alex.bsc

upon checking the pending reviews in the backend, i noticed some 450 spam reviews were awaiting my approval.
there is no checkbox to mass select them and so delete them.

furthermore, there is no option in magento to only allow logged in users or users to review products.

as such, this is essential to plug this vulnerability hole;

1. mass selection of pending reviews for deletion is essential, for eased deletion
2. spam protection is needed
3. option to only allow logged in users to post reviews

---

]]> #1 / Comment by alex.bsc

this thread discusses it and has a partial fix which will help you to accelarate a partial fix for the problem (requires users to log in).

http://www.magentocommerce.com/boards/viewthread/13555/]]> #2 / Comment by alex.bsc

more proof of an existing problem;

http://www.magentocommerce.com/boards/viewthread/18093/]]> #3 / Comment by alex.bsc

i do hope the issue is fixed?]]> #4 / Comment by Magento Team

Hello alex,

Mass selection of pending reviews works fine in 1.1.6.

An option to only allow logged in users to post reviews will be available in the next release.

Thank you.]]> #5 / Comment by skicrave

Is the option "Magento Team" spoke off above ever actually going to be offered?]]>