[espresso]

I have this mod installed for over 1 year and started getting hackers hijacking the form.

Carrie from BCSE promised a captcha feature for this mode since late last year but didn't get around to it yet.

So, I decided to disable the mod for unregistered users.

Just modify the skin1/customer/main/testimonials.tpl to:

{elseif $mode eq "new_form" or $mode eq "error"}
{capture name=dialog}
{if $login eq "" }
Please Login to write a Testimonial. We appreciate your Feedback, thank you.
{else}
<table width=100%>

and add the {/if} behind the </table> tag

Works for me...