LegRoom.net has been hit hard by comment spam on a couple of occasions. I thought that I had solved the problem after the first ordeal by restricting comments to authenticated users, but apparently that control can be bypassed (which I verified myself).
So, I hardcoded the logged-in user requirement for posting any comment. This should (keeping my fingers crossed) fix the problem.
BTW, would someone mind posting a reply to this thread just to verify that I haven't broken comments for authenticated users? Everything should be working, but I'd like to be sure. Thanks!