• Today I received a notification from my WP blog that there was a comment for moderation. The comment was nothing more than one of those pathetic spam for a pharmacy website. The issues, though, was this comment was pending approval even though I have WP set to require all users to login before being able to post a comment.

    I logged in to my WP and trashed the comment but I’m still wondering if WP is set to only allow comment posting when logged in how a comment could be there when no user registered. In the user database I’m the only user.

Viewing 2 replies - 1 through 2 (of 2 total)
  • Spam bots tend to access the comments.php file directly – bypassing any controls.

    Thread Starter krackerjaxz

    (@krackerjaxz)

    I never knew that. Is there a way to prevent that?

    After looking over things it appears that the matter was a bit more benign than I first anticipated. It appears it wasn’t actually a bypassing of security. It was nothing more than a spammer sending spam via a pingback.

    Spam was traced and all responsible ISPs/Hosting providers contacted. One of the hosting providers was a well-known and reputable one. Have yet to hear anything from the ISP or other hosting provider.

    Did a search and appears the particular IP of the ISP has a history of spamming. So, if I hear nothing then I’ll just ban that ISPs IP block via cPanel. No skin off my buttox.

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘Spam posts without registration’ is closed to new replies.