WordPress.org

1. mongo
   Member
   Posted 7 years ago #

   upgraded to 1.5. installed wordpress hashcash (1.7). set the options to not allow pingbacks or trackbacks. set it to require commenters to fill out name and email. finally set it to only allow registered users to comment. woke up this morning and a new crop of online casino ads had shown up--and these comments had no email address attached to them (goes without saying that this person is not a registered user). how is the spam getting past these measures? especially the "registered users only" thing?

2. Mark Jaquith
   WordPress Lead Dev
   Posted 7 years ago #

   Try these plugins:
   http://www.ioerror.us/software/bad-behavior/
   http://unknowngenius.com/blog/wordpress/spam-karma/dev/

   It's possible that trackbacks were sent to old entries that have pings open.

3. James
   Happiness Engineer
   Posted 7 years ago #

   http://codex.wordpress.org/Combating_Comment_Spam

4. davidchait
   Member
   Posted 7 years ago #

   they are getting through as trackbacks most likely.

5. mongo
   Member
   Posted 7 years ago #

   okay, have gone back and painstakingly turned off pings for all older entries. now that i've done that, and also have pingbacks and trackbacks globally turned off for new entries, and only allow registered members to comment, now am i likely to be spam-free?

6. angsuman
   Member
   Posted 7 years ago #

   Normally you get only trackback spam. I have never seen any pingback spam.

   You could have used phpmyadmin to turn them off.
   Try http://blog.taragana.com/index.php/archive/how-to-keep-your-wordpress-15-blog-spam-free/

7. Elliott C. Bäck
   Member
   Posted 7 years ago #

   You really should try WP-Hashcash. I just released a new version, which you can get here:

   http://elliottback.com/wp/archives/2005/05/11/wordpress-hashcash-20/

   It should stop all comment spam problems.

8. mongo
   Member
   Posted 7 years ago #

   elliott--i'll give your new version a try, but as i noted in my first post in this thread, i'm already using hashcash 1.7.

   my problem finally went away only after i disabled trackbacks and pingbacks and went back and unchecked the "allow pings" box on all old posts. and yes, i missed a couple and those were the only two posts to get spammed soon after. i'll give your 2.0 version a try--but i'm guessing it doesn't do anything about trackback spam anyway.

Topic Closed

This topic has been closed to new replies.