A site I'm building uses a separate authentication system, so users don't need to login to MT to comment, instead passing user data from this other system to the comment form. The only way a user will see a comment form is if they're logged in.
What data do I need to pass to mt-comments.cgi in order for it to be a valid request? I'm not using any of the mt.js code to verify the comment session, preview the comment (have rolled my own previously) or validate the comment form data onsubmit. (The comment form is basically just a textarea now, with all other data in hidden fields.) I simply want to pass a name, email address, and comment text, along with whatever data necessary to make the request valid to mt-comments.cgi.
I see there's now hidden fields for armor and sid. I tried setting armor=0, and removing it altogether, but still get the invalid request error.
Can someone tell me what mt-comments.cgi is expecting to receive as a valid request?
Reported on Movable Type 4.2
I am having a related, but slightly different problem with comments. I'm also getting "invalid request" and "comment submission error" and it's not because of a separate authentication system. I also tried turning armor="0" and so on to no use.
I'm using MT's JS and I've researched that this does have something to do with the where the mt-static directory sits in relation to your blog root, the mt-config.cgi directives and mt.js. Since our problems are not exactly the same, it wouldn't help for me to explain it all here. There are some postings in this forum that shined some light, but still no solution to my problem.
And, unfortunately, I'm not as well versed in JS or cgi. I just figured since your prob looked similar I'd offer a hand. Search in the forums about "comments, invalid request" and see where that leads. Lemme know if you see the light.
lee
Hi Lee,
It looks like my issue has resolved itself. I think I was having the problem because I had a separate .htaccess authentication on top of the MT admin URL, and then just needed to restart my browser to clear that authentication out after I removed it.