Webmasters Stack Exchange is a question and answer site for webmasters. It only takes a minute to sign up.
Sign up to join this community
On Stackoverflow/Stackexchange, users are allowed to add posts without requiring login, just wondering what should be considered before allowing this kind behavior on a site?
Couple of things spring to mind...
Are there any other things to consider?
The biggest thing that comes to mind is, "How are you going to handle moderation?" StackExchange avoids a lot of spam because it is self-moderated. However, if you don't allow your users to moderate or you don't have users willing to moderate, the onus falls on you. Moderation becomes much easier if you require authentication.
Preventing cross-site scripting attacks by "escaping" the contents (i.e. prevent any HTML/script being interpreted as such when you serve them back up) would help stop abuse. Also, if you allow links in comments then including the rel="nofollow" HTML attribute negates the value of people doing so just to game search engines.
You could "teach" the site to filter out undesirable comments in the same way that modern email spam filtering works - see Paul Graham's writings on this.
Also using automatic Spam detection via Askimet (http://askimet.com). Askimet is induced with popular Content Management Systems. So, probably self-moderation is easy.
Many users (including me), hate to login to comment. Integration of OpenID makes it easy to comment.
Depending upon what type of site you host and the content you allow within anonymous posts, you might find yourself dealing with botnets, spammers, and trolls hiding behind free proxies.
Requiring authentication and verifying the unique e-mail address provided on new account creation slows down most of the malicious activity... (and slowing it down is as much as you can hope for, really)
