1. A report review button and correlated backend t...
# general
f
2. A report review button and correlated backend to review reported reviews
k
what’s the purpose of reviewing reviews? avoid spam and bad reviews?
f
It could use a similar mechanism to this one allowing customers to vote for review which could allow implementations such as most useful reviews, least useful, in addition a report button for moderation
Counter cache could be used
Moderation also
the desire has been expressed my multiple users in a github issue and it doesn't block or break anything https://github.com/solidusio-contrib/solidus_reviews/issues/63
k
if you want to build these features in the extension, I’m not against it.
👍 1
f
The report button for the obvious implications of customer generated content
Are the suggestions made in https://guides.solidus.io/4.2/customization/customizing-the-api/ still valid regarding the usage of active record associations and counter cache?
k
that’s why everyone is using a 3rd party service for reviews, by the way.
f
it's like an expensive solution for a small problem
k
a small problem until you are hit by bots
f
captcha we do have on the list
is there any reference implementation of captcha anywhere
image.png
is there any preferences for not horse based bot control
k
this cannot live in a review extension IMHO
f
The horses or the captcha
🤣 1
that's why I asked, I see why captcha should be kept separated from the rest
The question is 1) if a basic captcha mechanism should be anywhere for user generated content and signups or not
Is there currently any reference implementation of captchas in solidus?
k
nope, but there are generic solution for any Rails app, eg: https://github.com/ambethia/recaptcha
👍🏼 1
f
I feel that thomas would not be ok with a google based solution but I also believe a recaptcha in the starter frontend would be beneficial
👍🏻 1
k
I’m not saying to add this to the starter frontend. If needed one could just use this gem with their store
f
ok, do you feel a reference implementation of a captcha is needed or do feel it's too individual ¨
I am indifferent on this one
We can easy make a reference implementation in the front-end or review app or just keep it separate.
both is fine for me
k
I’d keep it out of it. I was just saying that usually large stores avoid implementing reviews on their own because it adds the surface of possible problems with bots to be solved internally, and generally is cheaper to pay an external service specialized in this thing. But I don’t have strong opinions on the content of the extension, it’s just a reference implementation, and each store can use parts of it based on their needs.
f
ok it's a fair view
how do you handle on customer installation captcha on signups
k
each store has different needs, but in general probably Cloudflare is the best solution for preventing bots
👍🏼 1
👍🏻 1
c
yeah, I would say most stores would use Cloudflare bot prevention rules (or Turnstile) or ReCaptcha because the low effort to implement. I am also with @kennyadsl that the bot prevention should be left to the users of the extension to implement
f
ok
c
alternatively you could provide an optional implementation for ReCaptcha or one of the other tools, like the one you shared as an example
f
I am trying to find something less bound to cloudflare to tie the system in
c
Yeah, so use the horse one knowing people should replace it with whatever they use
f
@kennyadsl @Chris Todorov Is reviews something that requires a login in your opinion?
t
Login requirements is a preference each stores decides differently.
f
Understood
c
@Fabian V. Thobe most stores I've worked on solicit reviews from purchasers a few days/weeks post-purchase. I think it'll be different for each store like Thomas suggested, but requiring login would limit the amount of spam reviews I suspect.
👍🏻 1
f
IMO any interaction that goes beyond a mere visualization requires login
@tvdeyen do you know if there are legal requirements to store IP on user generated content?
t
No
f
@tvdeyen there you go. https://github.com/gms-electronics/solidus_reviews/pull/2 @Chris Todorov we have implemented an url parameter that opens the modal for reviews on starter, we are finishing up the integration of post login redirect url. You send a mail with a link with the review parameter we validate if you are logged in and redirect to the login page to cover post order review request emails.
@kennyadsl no captchas with horses or without have been implemented
There are new endpoints to upvote, downvote and report reviews, but we have no idea about how you would like a report review functionality
all over tests are passing and the extension seems to work sufficiently.