Yes, normally people can, but you are protecting yourself from comment spam by requiring sign up. The best way is to require people to do some kind of test like reading fuzzy letters each time they comment, then they dont have to sign up, and bots cant get throuhg. Then you just have to sort out human comment spam... like what i'm talking about in the other thread
