silverstripe / silverstripe-comments

        $this->assertFalse($check && $check->exists());

    }

    public function testSpamComment()

    {

        // Test anonymous user

        if ($member = Member::currentUser()) {

            $member->logOut();

        }

        $comment = $this->objFromFixture('Comment', 'firstComA');

        $commentID = $comment->ID;

        $this->assertNull($comment->SpamLink(), 'No permission to see mark as spam link');

        $spam = $this->get('CommentingController/spam/'.$comment->ID.'?ajax=1');

        $this->assertEquals(403, $spam->getStatusCode());

        $check = DataObject::get_by_id('Comment', $commentID);

        $this->assertEquals(0, $check->IsSpam, 'No permission to mark as spam');

        // Test non-authenticated user

        $this->logInAs('visitor');

        $this->assertNull($comment->SpamLink(), 'No permission to see mark as spam link');

        // Test authenticated user

        $this->logInAs('commentadmin');

        $comment = $this->objFromFixture('Comment', 'firstComA');

        $commentID = $comment->ID;

        $adminComment1Link = $comment->SpamLink();

        $this->assertContains('CommentingController/spam/'.$commentID.'?t=', $adminComment1Link);

        // Test that this link can't be shared / XSS exploited

        $this->logInAs('commentadmin2');

        $spam = $this->get($adminComment1Link);

        $this->assertEquals(400, $spam->getStatusCode());

        $check = DataObject::get_by_id('Comment', $comment->ID);

        $this->assertEquals(0, $check->IsSpam, 'No permission to mark as spam');

        // Test that this other admin can spam the comment with their own link

        $adminComment2Link = $comment->SpamLink();

        $this->assertNotEquals($adminComment2Link, $adminComment1Link);

        $this->autoFollowRedirection = false;

        $spam = $this->get($adminComment2Link);

        $this->assertEquals(302, $spam->getStatusCode());

        $check = DataObject::get_by_id('Comment', $commentID);

        $this->assertEquals(1, $check->IsSpam);

        // Cannot re-spam spammed comment

        $this->assertNull($check->SpamLink());

    }

        $this->assertNull($check->SpamLink());

    }

    public function testHamComment()

    {

        // Test anonymous user

        if ($member = Member::currentUser()) {

            $member->logOut();

        }

        $comment = $this->objFromFixture('Comment', 'secondComC');

        $commentID = $comment->ID;

        $this->assertNull($comment->HamLink(), 'No permission to see mark as ham link');

        $ham = $this->get('CommentingController/ham/'.$comment->ID.'?ajax=1');

        $this->assertEquals(403, $ham->getStatusCode());

        $check = DataObject::get_by_id('Comment', $commentID);

        $this->assertEquals(1, $check->IsSpam, 'No permission to mark as ham');

        // Test non-authenticated user

        $this->logInAs('visitor');

        $this->assertNull($comment->HamLink(), 'No permission to see mark as ham link');

        // Test authenticated user

        $this->logInAs('commentadmin');

        $comment = $this->objFromFixture('Comment', 'secondComC');

        $commentID = $comment->ID;

        $adminComment1Link = $comment->HamLink();

        $this->assertContains('CommentingController/ham/'.$commentID.'?t=', $adminComment1Link);

        // Test that this link can't be shared / XSS exploited

        $this->logInAs('commentadmin2');

        $ham = $this->get($adminComment1Link);

        $this->assertEquals(400, $ham->getStatusCode());

        $check = DataObject::get_by_id('Comment', $comment->ID);

        $this->assertEquals(1, $check->IsSpam, 'No permission to mark as ham');

        // Test that this other admin can ham the comment with their own link

        $adminComment2Link = $comment->HamLink();

        $this->assertNotEquals($adminComment2Link, $adminComment1Link);

        $this->autoFollowRedirection = false;

        $ham = $this->get($adminComment2Link);

        $this->assertEquals(302, $ham->getStatusCode());

        $check = DataObject::get_by_id('Comment', $commentID);

        $this->assertEquals(0, $check->IsSpam);

        // Cannot re-ham hammed comment

        $this->assertNull($check->HamLink());

    }

        $this->assertNull($check->HamLink());

    }

    public function testApproveComment()

    {

        // Test anonymous user

        if ($member = Member::currentUser()) {

            $member->logOut();

        }

        $comment = $this->objFromFixture('Comment', 'secondComB');

        $commentID = $comment->ID;

        $this->assertNull($comment->ApproveLink(), 'No permission to see approve link');

        $approve = $this->get('CommentingController/approve/'.$comment->ID.'?ajax=1');

        $this->assertEquals(403, $approve->getStatusCode());

        $check = DataObject::get_by_id('Comment', $commentID);

        $this->assertEquals(0, $check->Moderated, 'No permission to approve');

        // Test non-authenticated user

        $this->logInAs('visitor');

        $this->assertNull($comment->ApproveLink(), 'No permission to see approve link');

        // Test authenticated user

        $this->logInAs('commentadmin');

        $comment = $this->objFromFixture('Comment', 'secondComB');

        $commentID = $comment->ID;

        $adminComment1Link = $comment->ApproveLink();

        $this->assertContains('CommentingController/approve/'.$commentID.'?t=', $adminComment1Link);

        // Test that this link can't be shared / XSS exploited

        $this->logInAs('commentadmin2');

        $approve = $this->get($adminComment1Link);

        $this->assertEquals(400, $approve->getStatusCode());

        $check = DataObject::get_by_id('Comment', $comment->ID);

        $this->assertEquals(0, $check->Moderated, 'No permission to approve');

        // Test that this other admin can approve the comment with their own link

        $adminComment2Link = $comment->ApproveLink();

        $this->assertNotEquals($adminComment2Link, $adminComment1Link);

        $this->autoFollowRedirection = false;

        $approve = $this->get($adminComment2Link);

        $this->assertEquals(302, $approve->getStatusCode());

        $check = DataObject::get_by_id('Comment', $commentID);

        $this->assertEquals(1, $check->Moderated);

        // Cannot re-approve approved comment

        $this->assertNull($check->ApproveLink());

    }