Do you think we should keep it for login or just Registartion?

Up to you - I say leave it on and see if we get used to it... if it feels like a hassle, we'll leave it at registration-only. Either way, I'm going to leave the "require admin authorization for new user" thing just for another day just to see if spammers have a workaround for the captcha. If no spammer successfully makes a new account (pending approval) then I'll remove the approval-required thing.

in my humble opinion, good customized captcha (not standard) + moderation can kill 99% of spamers.

Janet Kellman, software reviews manager

They all had the same email address as the spammer, or an email I didn't like. :P
They where new accounts so they didn't lose anything, just make your account again if it was a real account.

I think we're all set then. Tomorrow I'll delete this page, remove the admin-approval requirement, and create a news update that's nicer - that'll get rid of these ugly comments.

Also, I found out how to ban by IP - the spammers are too clever for it to work (too may IPs) but it's good to knwo for future reference.

admin-access control-access rules-add rule-deny host (we can also deny usernames and sites).

Did you add that or did I just miss that feature?

I just added that, along side a few other security modules.

I think nmoderation has to go, there's just to much stuff on the front page...

Also the captcha module seems to not work the first time (always takes 2 tries to login). I wonder if this is a known bug...?

That was me dumping stuff onto the front page. I just figured that we'd been so behind on keeping it populated, and as kind of a "hey, look, we got nmoderation!" thing. Just for a once-off.

I'll prune some stuff out. Nobody's used nmoderation but me so far (us admins have "1-vote-to-front" powers, so I was having fun with it).

edit: craaap. nmoderation has a bug. I can't delete my upmod votes or convert them to "neutral".

How node moderation works: it's a sum. +1 means add 1 to score, -1 means add zero to score. Voting zero just removes your old +/- vote (so for you, Nieb, it does nothing since you're not nullifying a past vote). As admins, our votes are worth 3 (so it's really +3/-3). >1 = front page, &lt-1= unpublish.

The problem is that I can neither nullify my +1 by going "neutral" nor by using my admin-powers to delete the +1 vote. In fact, once a vote is made, it can't be changed by any mechanism. Bad bug.

Theoretically we could get a thing back into sectional by one of us voting +3 and one voting -3... but that's nasty risky, since if the +3 disappeared it would be unpublished (getting at unpublished content requires bad juju - even nmoderation itself is unaware of unpublished nodes).

a patch is here: http://drupal.org/node/60144

But you may be right, it may just be simpler to ditch node moderation. BTW, what version of nmoderation and drupal is runing rigth now?

I don't know how to execute that patch...

Get the source, put the patch in the top level of the source tree, then "patch -p1 < nmoderation.module_0.patch" should do it.

After that, "./configure", "make", and "make install" and everything should work fine.

Of course, no guarantees on stability, don't use on production systems, etc...

Sounds fine - how did you get the nodes off the front page?

Goto 'Edit' then goto 'Publishing Options' on the bottom.