LegRoom.net has been hit hard by comment spam on a couple of occasions.  I thought that I had solved the problem after the first ordeal by restricting comments to authenticated users, but apparently that control can be bypassed (which I verified myself).
So, I hardcoded the logged-in user requirement for posting any comment.  This should (keeping my fingers crossed) fix the problem.
BTW, would someone mind posting a reply to this thread just to verify that I haven't broken comments for authenticated users?  Everything should be working, but I'd like to be sure.  Thanks!
