Ok so I looked at the source and found: (def process-comment (user parent text ip whence)... I don't see why it would be hard to submit "parent" and "text" as

Ok so I looked at the source and found: (def process-comment (user parent text ip whence)... I don't see why it would be hard to submit "parent" and "text" as POST-parameters. User seems to be stored in a cookie anyway and ip should also be easily retrievable.