I'm in the process of setting up a blog that has already begun to get comment spam, even though we have checked the "Users must be registered and logged in to comment" option. I will enable Akismet shortly, but I'm a confused about how the spam was posted at all.
The message says "357204 Blog Verification Said" as if "357204 Blog Verification" were a username, but no such user exists. Can anyone explain what's going on?
Thanks!
Actually, I did search and I had read the thread you pointed to. I understand that it's spam.
My question is, how is comment spam getting posted when I have the blog set to require logins in order to comment?
Thanks!
Because they are not humans but automated scripts that go directly to the file.
Use an anti-spam plugin (or two :).
If they can access the script directly, bypassing the login requirement I've set up, wouldn't that be considered a bug?
. . . And for what it's worth, I have now set up Akismet.