silverstripe / silverstripe-comments

        $this->assertFalse($check && $check->exists());

    }

    public function testSpamComment()

    {

        // Test anonymous user

        if ($member = Member::currentUser()) {

            $member->logOut();

        }

        $comment = $this->objFromFixture(Comment::class, 'firstComA');

        $commentID = $comment->ID;

        $this->assertNull($comment->SpamLink(), 'No permission to see mark as spam link');

        $spam = $this->get('comments/spam/'.$comment->ID.'?ajax=1');

        $this->assertEquals(403, $spam->getStatusCode());

        $check = DataObject::get_by_id(Comment::class, $commentID);

        $this->assertEquals(0, $check->IsSpam, 'No permission to mark as spam');

        // Test non-authenticated user

        $this->logInAs('visitor');

        $this->assertNull($comment->SpamLink(), 'No permission to see mark as spam link');

        // Test authenticated user

        $this->logInAs('commentadmin');

        $comment = $this->objFromFixture(Comment::class, 'firstComA');

        $commentID = $comment->ID;

        $adminComment1Link = $comment->SpamLink();

        $this->assertContains('comments/spam/' . $commentID . '?t=', $adminComment1Link);

        // Test that this link can't be shared / XSS exploited

        $this->logInAs('commentadmin2');

        $spam = $this->get($adminComment1Link);

        $this->assertEquals(400, $spam->getStatusCode());

        $check = DataObject::get_by_id(Comment::class, $comment->ID);

        $this->assertEquals(0, $check->IsSpam, 'No permission to mark as spam');

        // Test that this other admin can spam the comment with their own link

        $adminComment2Link = $comment->SpamLink();

        $this->assertNotEquals($adminComment2Link, $adminComment1Link);

        $this->autoFollowRedirection = false;

        $spam = $this->get($adminComment2Link);

        $this->assertEquals(302, $spam->getStatusCode());

        $check = DataObject::get_by_id(Comment::class, $commentID);

        $this->assertEquals(1, $check->IsSpam);

        // Cannot re-spam spammed comment

        $this->assertNull($check->SpamLink());

    }

    public function testHamComment()

    {

        $this->assertNull($check->SpamLink());

    }

    public function testHamComment()

    {

        // Test anonymous user

        if ($member = Member::currentUser()) {

            $member->logOut();

        }

        $comment = $this->objFromFixture(Comment::class, 'secondComC');

        $commentID = $comment->ID;

        $this->assertNull($comment->HamLink(), 'No permission to see mark as ham link');

        $ham = $this->get('comments/ham/' . $comment->ID . '?ajax=1');

        $this->assertEquals(403, $ham->getStatusCode());

        $check = DataObject::get_by_id(Comment::class, $commentID);

        $this->assertEquals(1, $check->IsSpam, 'No permission to mark as ham');

        // Test non-authenticated user

        $this->logInAs('visitor');

        $this->assertNull($comment->HamLink(), 'No permission to see mark as ham link');

        // Test authenticated user

        $this->logInAs('commentadmin');

        $comment = $this->objFromFixture(Comment::class, 'secondComC');

        $commentID = $comment->ID;

        $adminComment1Link = $comment->HamLink();

        $this->assertContains('comments/ham/' . $commentID . '?t=', $adminComment1Link);

        // Test that this link can't be shared / XSS exploited

        $this->logInAs('commentadmin2');

        $ham = $this->get($adminComment1Link);

        $this->assertEquals(400, $ham->getStatusCode());

        $check = DataObject::get_by_id(Comment::class, $comment->ID);

        $this->assertEquals(1, $check->IsSpam, 'No permission to mark as ham');

        // Test that this other admin can ham the comment with their own link

        $adminComment2Link = $comment->HamLink();

        $this->assertNotEquals($adminComment2Link, $adminComment1Link);

        $this->autoFollowRedirection = false;

        $ham = $this->get($adminComment2Link);

        $this->assertEquals(302, $ham->getStatusCode());

        $check = DataObject::get_by_id(Comment::class, $commentID);

        $this->assertEquals(0, $check->IsSpam);

        // Cannot re-ham hammed comment

        $this->assertNull($check->HamLink());

    }

    public function testApproveComment()

    {

        $this->assertNull($check->HamLink());

    }

    public function testApproveComment()

    {

        // Test anonymous user

        if ($member = Member::currentUser()) {

            $member->logOut();

        }

        $comment = $this->objFromFixture(Comment::class, 'secondComB');

        $commentID = $comment->ID;

        $this->assertNull($comment->ApproveLink(), 'No permission to see approve link');

        $approve = $this->get('comments/approve/' . $comment->ID . '?ajax=1');

        $this->assertEquals(403, $approve->getStatusCode());

        $check = DataObject::get_by_id(Comment::class, $commentID);

        $this->assertEquals(0, $check->Moderated, 'No permission to approve');

        // Test non-authenticated user

        $this->logInAs('visitor');

        $this->assertNull($comment->ApproveLink(), 'No permission to see approve link');

        // Test authenticated user

        $this->logInAs('commentadmin');

        $comment = $this->objFromFixture(Comment::class, 'secondComB');

        $commentID = $comment->ID;

        $adminComment1Link = $comment->ApproveLink();

        $this->assertContains('comments/approve/' . $commentID . '?t=', $adminComment1Link);

        // Test that this link can't be shared / XSS exploited

        $this->logInAs('commentadmin2');

        $approve = $this->get($adminComment1Link);

        $this->assertEquals(400, $approve->getStatusCode());

        $check = DataObject::get_by_id(Comment::class, $comment->ID);

        $this->assertEquals(0, $check->Moderated, 'No permission to approve');

        // Test that this other admin can approve the comment with their own link

        $adminComment2Link = $comment->ApproveLink();

        $this->assertNotEquals($adminComment2Link, $adminComment1Link);

        $this->autoFollowRedirection = false;

        $approve = $this->get($adminComment2Link);

        $this->assertEquals(302, $approve->getStatusCode());

        $check = DataObject::get_by_id(Comment::class, $commentID);

        $this->assertEquals(1, $check->Moderated);

        // Cannot re-approve approved comment

        $this->assertNull($check->ApproveLink());

    }

    public function testCommenterURLWrite()

    {