Thanks for the quick answer, Kemory!
User submitted reviews are important to boost substantially the volume of reviews and participation of users; it is therefore important for any site to become really adopted! In terms of security, my take is that the key is to restrict the feature in two ways:
1. Reviews should be included as draft and need to be approved by the administrator. As the reviews show in order of inclusion and can be deleted in bulk, eventual spams are a relatively small price to pay and the effects can be easily controlled.
2. Administrators need to be able to control the fields the user can fill in the form. I would, for instance, welcome book details, synopsis, abstracts but would prefer to restrict the scoring for myself.
With these two restrictions, I would surely be good to go. I’ve already included user submitted posts for regular posts (plugin: https://perishablepress.com/user-submitted-posts/). I would support enthusiastically the inclusion of this and the collections feature (which is working great in your demo site) in the next version, if possible! ??
Regarding author’s url, I agree that the restriction may be linked to the theme. I’ve spent some time trying to include lines on the theme’s archive.php, without success. For instance:
$term = get_term_by( ‘slug’, get_query_var( ‘term’ ), get_query_var( ‘taxonomy’ ) );
echo $term->name;
works with name, description, count, term_id, slug, etc. but it does not work with rcno_author_taxonomy_url. Aby pointers?
Many thanks in advance!