WordPress.org

Ready to get started?Download WordPress

Forums

Meta Slider
[resolved] Spam through Meta Slider (7 posts)

  1. daphnel
    Member
    Posted 4 months ago #

    Hi there. I'm having a little unusual problem I think and have been looking around for a solution but haven't found any. These are the details of my site and Meta Slider version:
    ---------------------
    The issue can be found here: TBA
    The preview works: Yes
    It works with other themes: Yes
    It works when I disable all other plugins: Yes
    Meta Slider version: 2.7.1
    ---------------------

    The problem I have is not a visual one... I am receiving rather odd spam comments associated with Meta Slider. So far I've gotten 2 comments for separate sliders set up for the website I'm working on. These are the details of the last comment I've received:
    ---------------------
    Author: grdwubury
    Associated url: pecfeztdkwmn.com
    Associated email: kjsrfx@zsigwb.com
    Associated IP: 91.200.13.41
    Comment: wNTO7I pnghmptwdvrr, [url=http://acfgcdlsqtvm.com/]acfgcdlsqtvm[/url], [link=http://nxlxwjnfwklv.com/]nxlxwjnfwklv[/link], http://dxslzqqsyrft.com/
    ---------------------
    (I've not tried to click on any of the links associated with the comment, neither would I recommend it...)

    In the "In Response To" column, it lists the title of the Meta Slider. When I click on the link, it brings me to an empty single post page (as though the slider is an actual post).

    This has not happened before, however I understand that the person I'm building the website for does get a lot of spam through his current website. I hope to find a solution to prevent this from happening as it feels like a security flaw. As the site is not yet live and I'm still blocking robots access, I'm afraid it will only get worse once it is.

    Any feedback is great. Let me know if any other information is required.

    Thank you,
    daphne

    https://wordpress.org/plugins/ml-slider/

  2. Matcha Labs
    Member
    Plugin Author

    Posted 4 months ago #

    Hi Daphne,

    The Meta Slider slideshows are stored as a custom post in WordPress. Comments are not enabled on them so I'm not sure how this bot is making comments on them. Is there a comment form on the page when you click the direct link to it?

    The robots.txt file won't stop spammers from hitting your blog (they just ignore it). Have you set up any spam blocking like Akismet? You could also try installing the 'Disable Comments' plugin, but I don't think you will see Meta Slider listed as a post type that comments can be disabled for - this is because comments aren't enabled on them in the first place.

    Regards,
    Tom.

  3. daphnel
    Member
    Posted 4 months ago #

    Hi Tom,

    Firstly, thank you for your quick reply. I've actually received another odd comment today on another slider.

    Yes, there is a comment form on the page the direct link takes me to. As this page is slightly different as well from the other page templates I've set up, I'm not sure where it's coming from.

    I don't have Akismet enabled, but I do have the Better WP Security plugin. Not sure how much that helps as I've never had comments through Meta Slider before.

    I really hope to find a solution to this before we take the website live. Please let me know if you need any other information.

    Thank you,
    daphne

  4. daphnel
    Member
    Posted 4 months ago #

    Hi Tom,

    Just a few other details you may find useful.

    Here's the list of plugins I'm using for the website:
    ---------------------
    Better WP Security
    Blogger Importer
    Contact Form 7
    Contact Form Honeypot
    Kimili Flash Embed
    Meta Slider
    Shortcodes Ultimate
    Velvet Blues Update URLs
    WordPress SEO
    ---------------------

    Base theme used to build the website: HTML5 Blank WordPress Theme.

    Thank you,
    daphne

  5. Matcha Labs
    Member
    Plugin Author

    Posted 4 months ago #

    Hi Daphne,

    I've installed the same theme and can see the comment form too. I couldn't work out why it was displaying either.

    I've updated Meta Slider so that you can't even view the slideshow with a direct link (you'll get a 404 instead).

    This change is in the development version. To install:

    Go to http://wordpress.org/plugins/ml-slider/developers/
    Download the 'Development version' (under 'Other Versions')
    Log into WordPress
    Go to Plugins > Installed Plugins
    Deactivate and Delete Meta Slider (you will not lose your slides)
    Go to Plugins > Add New > Upload
    Select the development version zip file from your computer

    Regards,
    Tom

  6. daphnel
    Member
    Posted 4 months ago #

    Hi Tom,

    Thank you very much for your effort!

    It is a rather odd thing and it's never happened to previous websites we've built with the same theme. However, the previous websites do not receive as much spam as this one.

    I've had to launch the website late yesterday and so have tightened the website security as much as I dare (through Better WP Security plugin). As you advised that the robots.txt file won't stop spam, I figured it won't make too much of a difference.

    The website has not received new spam through the Meta Slider today. Nonetheless, I've installed the 'Development version' as advised. Hopefully that will be the last of it. I'll be monitoring the site for the next few days and see if anything else pops up.

    Really appreciate your help and quick replies. Thank you very much, Tom. Stay awesome!

    Cheers,
    daphne

  7. Matcha Labs
    Member
    Plugin Author

    Posted 4 months ago #

    You're welcome!

Reply

You must log in to post.

About this Plugin

About this Topic