Comments without a database

Under every post there is a comment form. A comment is stored by the plugin on the server – a small file, no database.

By default a comment is moderated: it waits until an admin approves it. The admins are set in app.sml on the server, not in the content repo, so nobody can make himself an admin with a pull request. The plugin sends them a mail with a link to the post; there they log in with their email address and see buttons to approve or delete.

ForgeCMS adds the spam protection to every plugin form: a hidden field for bots, a signed time stamp and a limit of posts per hour.

Try it: write a comment below.