silverstripe / silverstripe-comments

		$this->assertFalse($check && $check->exists());

	}

	public function testSpamComment() {

		// Test anonymous user

		if($member = Member::currentUser()) $member->logOut();

		$comment = $this->objFromFixture('Comment', 'firstComA');

		$commentID = $comment->ID;

		$this->assertNull($comment->SpamLink(), 'No permission to see mark as spam link');

		$spam = $this->get('CommentingController/spam/'.$comment->ID.'?ajax=1');

		$this->assertEquals(403, $spam->getStatusCode());

		$check = DataObject::get_by_id('Comment', $commentID);

		$this->assertEquals(0, $check->IsSpam, 'No permission to mark as spam');

		// Test non-authenticated user

		$this->logInAs('visitor');

		$this->assertNull($comment->SpamLink(), 'No permission to see mark as spam link');

		// Test authenticated user

		$this->logInAs('commentadmin');

		$comment = $this->objFromFixture('Comment', 'firstComA');

		$commentID = $comment->ID;

		$adminComment1Link = $comment->SpamLink();

		$this->assertContains('CommentingController/spam/'.$commentID.'?t=', $adminComment1Link);

		// Test that this link can't be shared / XSS exploited

		$this->logInAs('commentadmin2');

		$spam = $this->get($adminComment1Link);

		$this->assertEquals(400, $spam->getStatusCode());

		$check = DataObject::get_by_id('Comment', $comment->ID);

		$this->assertEquals(0, $check->IsSpam, 'No permission to mark as spam');

		// Test that this other admin can spam the comment with their own link

		$adminComment2Link = $comment->SpamLink();

		$this->assertNotEquals($adminComment2Link, $adminComment1Link);

		$this->autoFollowRedirection = false;

		$spam = $this->get($adminComment2Link);

		$this->assertEquals(302, $spam->getStatusCode());

		$check = DataObject::get_by_id('Comment', $commentID);

		$this->assertEquals(1, $check->IsSpam);

		// Cannot re-spam spammed comment

		$this->assertNull($check->SpamLink());

	}

	public function testHamComment() {

		// Test anonymous user

		$this->assertNull($check->SpamLink());

	}

	public function testHamComment() {

		// Test anonymous user

		if($member = Member::currentUser()) $member->logOut();

		$comment = $this->objFromFixture('Comment', 'secondComC');

		$commentID = $comment->ID;

		$this->assertNull($comment->HamLink(), 'No permission to see mark as ham link');

		$ham = $this->get('CommentingController/ham/'.$comment->ID.'?ajax=1');

		$this->assertEquals(403, $ham->getStatusCode());

		$check = DataObject::get_by_id('Comment', $commentID);

		$this->assertEquals(1, $check->IsSpam, 'No permission to mark as ham');

		// Test non-authenticated user

		$this->logInAs('visitor');

		$this->assertNull($comment->HamLink(), 'No permission to see mark as ham link');

		// Test authenticated user

		$this->logInAs('commentadmin');

		$comment = $this->objFromFixture('Comment', 'secondComC');

		$commentID = $comment->ID;

		$adminComment1Link = $comment->HamLink();

		$this->assertContains('CommentingController/ham/'.$commentID.'?t=', $adminComment1Link);

		// Test that this link can't be shared / XSS exploited

		$this->logInAs('commentadmin2');

		$ham = $this->get($adminComment1Link);

		$this->assertEquals(400, $ham->getStatusCode());

		$check = DataObject::get_by_id('Comment', $comment->ID);

		$this->assertEquals(1, $check->IsSpam, 'No permission to mark as ham');

		// Test that this other admin can ham the comment with their own link

		$adminComment2Link = $comment->HamLink();

		$this->assertNotEquals($adminComment2Link, $adminComment1Link);

		$this->autoFollowRedirection = false;

		$ham = $this->get($adminComment2Link);

		$this->assertEquals(302, $ham->getStatusCode());

		$check = DataObject::get_by_id('Comment', $commentID);

		$this->assertEquals(0, $check->IsSpam);

		// Cannot re-ham hammed comment

		$this->assertNull($check->HamLink());

	}

	public function testApproveComment() {

		// Test anonymous user

		$this->assertNull($check->HamLink());

	}

	public function testApproveComment() {

		// Test anonymous user

		if($member = Member::currentUser()) $member->logOut();

		$comment = $this->objFromFixture('Comment', 'secondComB');

		$commentID = $comment->ID;

		$this->assertNull($comment->ApproveLink(), 'No permission to see approve link');

		$approve = $this->get('CommentingController/approve/'.$comment->ID.'?ajax=1');

		$this->assertEquals(403, $approve->getStatusCode());

		$check = DataObject::get_by_id('Comment', $commentID);

		$this->assertEquals(0, $check->Moderated, 'No permission to approve');

		// Test non-authenticated user

		$this->logInAs('visitor');

		$this->assertNull($comment->ApproveLink(), 'No permission to see approve link');

		// Test authenticated user

		$this->logInAs('commentadmin');

		$comment = $this->objFromFixture('Comment', 'secondComB');

		$commentID = $comment->ID;

		$adminComment1Link = $comment->ApproveLink();

		$this->assertContains('CommentingController/approve/'.$commentID.'?t=', $adminComment1Link);

		// Test that this link can't be shared / XSS exploited

		$this->logInAs('commentadmin2');

		$approve = $this->get($adminComment1Link);

		$this->assertEquals(400, $approve->getStatusCode());

		$check = DataObject::get_by_id('Comment', $comment->ID);

		$this->assertEquals(0, $check->Moderated, 'No permission to approve');

		// Test that this other admin can approve the comment with their own link

		$adminComment2Link = $comment->ApproveLink();

		$this->assertNotEquals($adminComment2Link, $adminComment1Link);

		$this->autoFollowRedirection = false;

		$approve = $this->get($adminComment2Link);

		$this->assertEquals(302, $approve->getStatusCode());

		$check = DataObject::get_by_id('Comment', $commentID);

		$this->assertEquals(1, $check->Moderated);

		// Cannot re-approve approved comment

		$this->assertNull($check->ApproveLink());

	}

	public function testCommenterURLWrite() {

		$comment = new Comment();