Open-source comment systems and their anti-spam capabilities

Open-source comment systems and their anti-spam capabilities


We’ll talk about different comment systems and how they fight spam.

Believe me, I read a lot about comment systems. Well, I run an anti-spam API service and they are an essential part of my product as many requests to OOPSpam Anti-Spam API come from comment systems.

First I thought writing on how to integrate spam filter to one of those open-source comment systems. Then, I convinced it would be probably more helpful to put together a nice list of open-source (and free) comment systems and describe the way they fight with spam.

There are many options, some runs hell a lot of ads on your blog, some collect as much data possible about your visitors. Some ask for sign up, some don’t. I will list a few good ones, you can, of course, go ahead and check their functionality on their website or different blogs. But this blog post is going to talk about How they approach spam protection in their system.

Open-source and free comment systems

Isso

Isso is an open-source, self-hosted and completely free. It comes out as “a commenting server similar to Disqus”. Instead of writing a long paragraph I’m going to list main points:

Isso comment system

Why choose Isso as your comment system:

Spam filtering in Isso comment system

Now, let’s talk more about anti-spam capabilities. Isso comes with basic built-in spam protection. There are not any content or IP analyses. The only way you can protect yourself is to have a rate limit per IP. Let’s say, 2 comments per minute. This is the place where you could also require email, author and email fields so no more anonymous comment. You can activate these limitations on your config file (e.g isso.conf) by adding Guard parameter with appropriate fields :

[guard]
enabled = true
ratelimit = 2
direct-reply = 3
reply-to-self = false
require-author = false
require-email = false

Read more about Guard parameters on the Isso official documentation.

Schnack

Here is another alternative to paid comment systems. Just like Isso, Schnack is an open-source, free, self-hosted comment system. Here are the main points:

Schnack comment system

Why choose Schnack as your comment system:

As you can see, Schanck and Isso are pretty alike as both of them self-hosted, open-source and free. So, it is hard to tell why someone would choose one over the other. However, there are some differences such as Schanck’s backend is on Node.js while Isso’s is on Python. Schanck is smaller in terms of package size. While Isso supports anonymous commenting Schanck doesn’t.

Spam filtering in Schanck comment system

The author of Schanck answers this concern on his blog post.

Spam protection for Schnack comment system

As Schanck doesn’t support anonymous commenting and requires to sign up through one of the third-party providers which prevents spambots to comment on your blog. However, spammers are not always spambots. Many spammers are real people. There are services where you can hire people very cheap ($1 per hour) to spam. For these kinds of spammers, you cannot do much with third-party authentication.

Remark42

Remark42 looks pretty promising. It is self-hosted and lightweight. The backend is written in Go and the frontend is in Node.js. Remark42 supports an anonymous comment, social login through Twitter, Github, etc, Voting, moderating comments and a bunch of other features. I would say Remark42 offers everything and more than all 2 options above. Check the official website for the full list of features.

Remark42 comment system

Spam filtering in Remark42 comment system

As Remark42 allows optional anonymous commenting, anti-spam measurements need to be taken. There is not any built-in spam filter unless you disable anonymous commenting.

Spam filter for open-source comments system

One of the most liberal perks that come with open-source projects is the ability to integrate. You can build own anti-spam filter with various rules such as honeypot, captcha or use third-party solutions like OOPSpam Anti-Spam API. The main reason why people don’t want to use paid services like Disqus is privacy. For many, It is important to keep your data on your server while serving ad-free comments. Having anonymous comment is certainly good to have in your comment system, however, this also enables spammer to post on your blog post. That being said, some paid comment systems such as Commento is a privacy-focused solution. They rely on a subscription model instead of an advertisement. Commento uses Akismet as a spam-filter which is a red flag considering Akismet requires to submit your blog URL, user’s IP and user agent on top of the other optional parameters such as server information (such as $_SERVER in PHP). Read more about the difference between Akismet and OOPSpam Anti-Spam API on A better Akismet alternative page.

All in all, these are the main open-source, self-hosted and free comment systems in the wild. If you decide to give a try to OOPSpam Anti-Spam API as your spam filter, go ahead and test it on your browser. You could also reach me out via contact@oopspam.com. I’d be happy to help.

Happy spam-free day!

Get OOPSpam Anti-Spam WordPress Plugin→ Get an API key for free→