Reply to thread

I might be missing something here, but it seems that if a spammer makes a post without any spam in it and then edits it (assuming they have permission) then as long as they edit it using the inline editor then it won't get checked for spam and so they can then post whatever they like.

This is because the actionSaveInline function in XenForo_ControllerPublic_Post doesn't have any spam checking in it.