Introducing Jacaranda Comments for DNN 10

Written By
Trevor Forrester
Tags
Comments ModuleDNN 10
2026-07-26

I am pleased to introduce Jacaranda Comments, a page-level comments module created for DNN Platform 10 and Bootstrap 5 skin family.

The module began as a straightforward way to let registered users leave comments on individual DNN pages. It has since developed into a more complete discussion and moderation system, with threaded replies, guest participation, accessibility improvements and practical tools for site administrators.

The current development version is Jacaranda Comments 01.01.03.

Page-specific comments

Jacaranda Comments is designed to be placed directly on the page where discussion is needed.

This is particularly useful for long articles. For example, an article can be placed in one column and the comments module in another, allowing readers to follow the discussion without first scrolling through thousands of words to reach a comments section at the bottom of the page.

Each module instance is connected to its own DNN page and can be configured separately.

Registered and guest commenting

Registered DNN users can post comments and threaded replies using their existing account identity.

Administrators may also choose to enable guest commenting for an individual module. Guest commenting is disabled by default and can be switched off at any time.

When guest commenting is enabled:

  • Guests must provide a display name and private email address.

  • Guest comments and replies are always held for moderation.

  • Guest email addresses are not displayed publicly.

  • Guests are informed that they cannot edit their submissions.

  • Visitors who require editing ability are encouraged to register or sign in before commenting.

This gives site owners the option of wider public participation while retaining strong moderation control.

A 15-minute editing window

Registered users may edit their own comments or replies for up to 15 minutes after posting.

The editing window is enforced on the server and is limited to the original DNN user account. Guests cannot use the editing feature.

When moderation is enabled, an edited comment from a non-editor can be returned to the moderation queue before it becomes publicly visible again.

Moderation and permissions

Jacaranda Comments supports approval and deletion by authorised editors, administrators and superusers.

Moderation can be enabled for ordinary registered users, while guest submissions are always moderated.

The module retains server-side permission checks for:

  • posting;

  • replying;

  • editing;

  • approving;

  • deleting;

  • changing module settings.

Comments awaiting approval are clearly identified for moderators.

Private language filter

Administrators can optionally enable a private language filter for each module.

The administrator enters one unwanted term or phrase per line. The list is stored as a module setting and is never shown to visitors.

When a submission matches the configured list:

  • the original comment is not altered;

  • the submission is not automatically deleted;

  • it is quietly held for moderation;

  • the visitor receives the normal moderation message;

  • authorised moderators can see that the language filter was triggered.

The filter supports whole words and phrases while allowing the administrator to decide which terms are unsuitable for a particular site or audience.

Clear moderator email notifications

Moderator email notifications now identify the page immediately.

For example:

Comment awaiting approval — Understanding Grace

The email body includes:

  • the DNN page title;

  • a link to the page;

  • the module title;

  • the comment ID;

  • the author or guest name;

  • the moderation status;

  • whether the submission is a comment, reply or edit;

  • private guest contact details where applicable;

  • a private indication when the language filter has been triggered.

This makes it easier for moderators to identify the relevant page and respond quickly.

Accessible notifications and CAPTCHA controls

Success and error notifications remain visually connected to the comments module that generated them.

Instead of appearing in a general browser-window position, notification panels remain within the horizontal boundaries of the module. This is especially useful when an article and its comments are displayed side by side.

The notifications include:

  • strong high-contrast borders;

  • clear success or warning icons;

  • prominent headings;

  • visible close controls;

  • automatic dismissal;

  • responsive positioning for narrow screens.

The CAPTCHA answer field has also been improved with a stronger border, larger text, increased spacing and a clear keyboard-focus outline. This makes the field easier to locate for people with limited vision.

Additional features

Jacaranda Comments also includes:

  • threaded replies;

  • configurable comment-length limits;

  • live character counting;

  • optional CAPTCHA protection;

  • honeypot protection;

  • posting-rate limits;

  • email notifications;

  • exact return positioning after posting a comment or reply;

  • clean redirects that prevent browser form-resubmission warnings;

  • module-specific settings;

  • responsive Bootstrap 5 styling.

Security considerations

Security has been an important part of the project from the beginning.

The module uses parameterised SQL for submitted data and preserves output encoding to reduce the risk of SQL injection and stored cross-site scripting.

Guest submissions are treated as untrusted input and cannot override their moderation status through browser fields.

The module also retains:

  • server-side ownership checks;

  • anti-CSRF security-token checks;

  • parent-comment validation;

  • portal, page and module scope validation;

  • server-side character limits;

  • guest-specific rate limiting;

  • private handling of guest email addresses.

No public-facing system can be guaranteed to be completely immune from abuse, but Jacaranda Comments has been designed around cautious, server-side validation and controlled moderation.

Testing so far

Earlier revisions have been tested successfully on DNN Platform 10.3.2, including use with:

  • registered users;

  • administrators and superusers;

  • guest submissions;

  • comments and threaded replies;

  • approval and deletion;

  • notification emails;

  • CAPTCHA;

  • rate limiting;

  • character limits;

  • language filtering;

  • responsive and multi-column layouts;

  • default and custom DNN themes and containers.

Earlier builds have also been used successfully on live production pages.

The latest 01.01.03 changes should still be tested on a staging page or a low-risk production page before wider deployment.

Open source under the MIT License

Jacaranda Comments is being released under the MIT License.

The licence is included in the DNN installation package and is displayed during the extension installation process.

This allows other DNN users and developers to use, study, modify and contribute to the project under the terms of the MIT License.

Feedback is welcome

Jacaranda Comments is an evolving community project, and constructive feedback is welcome.

In particular, I would appreciate reports about:

  • installation or upgrade issues;

  • behaviour on different DNN 10 versions;

  • compatibility with other skins and containers;

  • accessibility;

  • mobile layouts;

  • moderation workflows;

  • guest-comment spam or abuse;

  • email delivery;

  • possible security concerns;

  • feature suggestions.

When reporting a problem, please include the DNN version, browser, skin or container, user role, module settings, steps needed to reproduce the issue and any related DNN Event Viewer entry.

You can follow the project, download the latest packages or submit feedback through:

GitHub: Jacaranda-Comments-Module

Project website: https://forrestitservices.org

Jacaranda Comments has grown through careful testing and small, deliberate improvements. I hope it will become a useful option for DNN site owners who need a flexible, page-specific comments system with practical moderation and accessibility features.